Zamulający komputer

**Posty:** 52 · przez **ostry99** 14 Lut 2011, 02:48

Witam, od jakiegoś czasu komputer mi muli. Do tego stopnia, że ciężko cokolwiek na nim zdziałac, wszystko włącza się strasznie wolno (włączam Menadżer zadań i tam pisze zużycie procesora 100 % podczas gdy nie mam uruchomionego żadnego znaczącego programu). Zamulanie pojawiało się w najmniej oczekiwanym momencie. Na początku reset kompa pomagał, dzisiaj jednak już nic nie pomogło. Uruchomiłem w trybie awaryjnym i wstawiam logi z OTL, bez tego trybu awaryjnego chyba by mi to z godzinę zajęło. Podejrzewam, że to mogą byc wirusy...

Kod: Zaznacz wszystko: OTL logfile created on: 2011-02-14 01:34:22 - Run 1 OTL by OldTimer - Version 3.2.20.6 Folder = C:\Users\Mateusz\Desktop 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 81,00% Memory free 8,00 Gb Paging File | 7,00 Gb Available in Paging File | 91,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 452,91 Gb Total Space | 389,53 Gb Free Space | 86,01% Space Free | Partition Type: NTFS Drive D: | 12,55 Gb Total Space | 2,10 Gb Free Space | 16,71% Space Free | Partition Type: NTFS Drive E: | 99,02 Mb Total Space | 92,36 Mb Free Space | 93,27% Space Free | Partition Type: FAT32 Computer Name: OSTROWSKI | User Name: Mateusz | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-02-14 01:33:50 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Mateusz\Desktop\OTL.exe PRC - [2010-12-10 12:47:59 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-02-14 01:33:50 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Mateusz\Desktop\OTL.exe MOD - [2010-08-21 06:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2009-11-25 07:17:18 | 000,202,752 | ---- | M] (AMD) [Auto | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2009-11-18 03:14:26 | 000,098,208 | ---- | M] (Andrea Electronics Corporation) [Auto | Stopped] -- C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe -- (AERTFilters) SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2010-10-14 17:27:38 | 000,092,216 | ---- | M] (Hewlett-Packard Company) [Auto | Stopped] -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe -- (HPDrvMntSvc.exe) SRV - [2010-08-28 01:31:12 | 000,581,632 | ---- | M] (THOMSON Telecom Belgium) [Auto | Stopped] -- C:\Program Files (x86)\Thomson\ST330\service\st330service.exe -- (st330service) SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009-10-01 05:01:32 | 002,320,920 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R) SRV - [2009-10-01 05:01:30 | 000,268,824 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R) SRV - [2009-09-20 10:55:20 | 001,037,824 | ---- | M] (Hewlett-Packard Co.) [Auto | Stopped] -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL -- (HPSLPSVC) SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2009-06-06 01:07:28 | 000,250,616 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe -- (GameConsoleService) SRV - [2009-02-22 12:00:00 | 000,129,584 | ---- | M] (EasyBits Sofware AS) [Auto | Stopped] -- C:\Windows\SysWOW64\ezsvc7.dll -- (ezSharedSvc) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2010-11-29 20:41:47 | 000,834,544 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2010-08-28 01:31:12 | 000,054,272 | ---- | M] (THOMSON Telecom Belgium) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stppp.sys -- (stppp) DRV:[b]64bit:[/b] - [2010-08-27 22:42:23 | 000,058,880 | ---- | M] (THOMSON Telecom Belgium) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\steth.sys -- (STETH) DRV:[b]64bit:[/b] - [2010-08-27 22:42:23 | 000,047,616 | ---- | M] (THOMSON Telecom Belgium) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\st330.sys -- (ST330) DRV:[b]64bit:[/b] - [2010-08-27 22:42:23 | 000,024,576 | ---- | M] (THOMSON Telecom Belgium) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stbus.sys -- (STBUS) DRV:[b]64bit:[/b] - [2009-11-25 07:52:16 | 006,174,720 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV:[b]64bit:[/b] - [2009-11-19 03:30:56 | 000,123,408 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService) DRV:[b]64bit:[/b] - [2009-11-03 19:59:04 | 000,299,056 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:[b]64bit:[/b] - [2009-10-24 02:53:00 | 000,291,328 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2009-10-22 12:54:24 | 000,040,464 | ---- | M] (Kaspersky Lab) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\42275592.sys -- (42275592) DRV:[b]64bit:[/b] - [2009-10-13 11:16:40 | 000,409,624 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2009-10-09 22:30:56 | 000,352,784 | ---- | M] (Kaspersky Lab) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\4227559.sys -- (setup_9.0.0.722_14.02.2011_00-12drv) DRV:[b]64bit:[/b] - [2009-10-05 09:34:00 | 001,542,656 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:[b]64bit:[/b] - [2009-09-25 16:59:46 | 000,157,712 | ---- | M] (Kaspersky Lab) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\42275591.sys -- (42275591) DRV:[b]64bit:[/b] - [2009-09-23 02:39:00 | 000,225,280 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR) DRV:[b]64bit:[/b] - [2009-09-17 21:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R) DRV:[b]64bit:[/b] - [2009-08-09 22:25:45 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone) DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-14 00:31:10 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2009-06-10 22:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92) DRV:[b]64bit:[/b] - [2009-06-10 22:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac) DRV:[b]64bit:[/b] - [2009-06-10 22:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA) DRV:[b]64bit:[/b] - [2009-06-10 22:01:06 | 001,146,880 | ---- | M] (LSI Corp) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem) DRV:[b]64bit:[/b] - [2009-06-10 21:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs) DRV:[b]64bit:[/b] - [2009-06-10 21:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:[b]64bit:[/b] - [2009-06-10 21:35:33 | 000,389,120 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7) DRV:[b]64bit:[/b] - [2009-06-10 21:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64) Intel(R) DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-04-29 08:48:32 | 000,018,432 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HpqKbFiltr.sys -- (HpqKbFiltr) DRV - [2009-09-23 02:39:00 | 000,225,280 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\RtsUStor.sys -- (RSUSBSTOR) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com IE - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/?pc=AVBR IE - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://vshare.toolbarhome.com/?hp=df [binary data] IE - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.mydtzone.com/startpage IE - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.mydtzone.com/startpage|http://vshare.toolbarhome.com/?hp=df" FF - prefs.js..extensions.enabledItems: smartwebprinting@hp.com:4.51 FF - prefs.js..extensions.enabledItems: vshare@toolbar:1.0.0 FF - prefs.js..keyword.URL: "http://vshare.toolbarhome.com/search.aspx?srch=ku&q=" FF - HKLM\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-09-23 18:12:07 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010-12-10 12:48:00 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010-12-16 21:39:08 | 000,000,000 | ---D | M] [2010-09-16 16:08:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\Extensions [2011-02-14 01:31:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\Firefox\Profiles\742vx3ig.default\extensions [2010-09-25 14:26:31 | 000,000,000 | ---D | M] (vShare Plugin) -- C:\Users\Mateusz\AppData\Roaming\mozilla\Firefox\Profiles\742vx3ig.default\extensions\vshare@toolbar [2010-11-29 20:42:25 | 000,002,059 | ---- | M] () -- C:\Users\Mateusz\AppData\Roaming\Mozilla\Firefox\Profiles\742vx3ig.default\searchplugins\daemon-search.xml [2010-09-25 14:26:50 | 000,001,583 | ---- | M] () -- C:\Users\Mateusz\AppData\Roaming\Mozilla\Firefox\Profiles\742vx3ig.default\searchplugins\web-search.xml [2010-09-16 16:21:55 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2010-09-23 18:12:07 | 000,000,000 | ---D | M] (HP Smart Web Printing) -- C:\PROGRAM FILES (X86)\HP\DIGITAL IMAGING\SMART WEB PRINTING\MOZILLAADDON3 [2010-09-14 22:29:36 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2010-09-14 22:29:36 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2010-09-14 22:29:36 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2010-09-14 22:29:36 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2010-09-14 22:29:36 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2010-09-14 22:29:36 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2009-06-10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) O2 - BHO: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll () O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - File not found O3 - HKLM\..\Toolbar: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll () O3 - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\..\Toolbar\WebBrowser: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll () O4:[b]64bit:[/b] - HKLM..\Run: [diagnostics] C:\Program Files (x86)\Thomson\ST330\diagnostics\diagnostics.exe (THOMSON Telecom Belgium) O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [RtkOSD] C:\Program Files (x86)\Realtek\Audio\OSD\RtVOsd64.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [diagnostics] C:\Program Files (x86)\Thomson SpeedTouch\ST330\diagnostics\diagnostics.exe (THOMSON Telecom Belgium) O4 - HKLM..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe (EasyBits Software AS) O4 - HKLM..\Run: [SpeedTouch USB Diagnostics] C:\Program Files (x86)\Thomson\SpeedTouch USB\Dragdiag.exe (THOMSON Telecom Belgium) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000..\Run: [Gadu-Gadu 10] C:\Program Files (x86)\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000..\Run: [Odkurzacz-MCD] C:\Program Files (x86)\Odkurzacz\odk_mcd.exe (Franmo Software) O4 - Startup: C:\Users\Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\setup_9.0.0.722_14.02.2011_00-12.lnk = C:\Users\Mateusz\Desktop\Virus Removal Tool\setup_9.0.0.722_14.02.2011_00-12\startup.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0 O7 - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95 00 00 00 [binary data] O7 - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0 O7 - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0 O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra Button: Pokaż lub ukryj HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 153.19.208.50 153.19.208.2 O18:[b]64bit:[/b] - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\vsharechrome {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - Reg Error: Key error. File not found O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Handler\vsharechrome {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - C:\Program Files (x86)\vShare\vshare_toolbar.dll () O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O28 - HKLM ShellExecuteHooks: {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll (EasyBits Software Corp.) O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{2c35c6b3-fbf1-11df-a924-c80aa96dc959}\Shell - "" = AutoRun O33 - MountPoints2\{2c35c6b3-fbf1-11df-a924-c80aa96dc959}\Shell\AutoRun\command - "" = H:\Autorun.exe O33 - MountPoints2\{a63bdd8f-b53f-11df-9a9a-c80aa96dc959}\Shell - "" = AutoRun O33 - MountPoints2\{a63bdd8f-b53f-11df-9a9a-c80aa96dc959}\Shell\AutoRun\command - "" = G:\Autorun.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] File not found -- C:\Users\Mateusz\Desktop\analiza.rar [2011-02-14 01:33:49 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Users\Mateusz\Desktop\OTL.exe [2011-02-14 01:31:38 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Users\Mateusz\Desktop\OTL.com [2011-02-14 01:17:08 | 000,708,152 | ---- | C] (Duplex Secure Ltd.) -- C:\Users\Mateusz\Desktop\SPTDinst-v176-x64.exe [2011-02-14 01:12:34 | 000,595,000 | ---- | C] (Duplex Secure Ltd.) -- C:\Users\Mateusz\Desktop\SPTDinst-v176-x86.exe [2011-02-13 23:01:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab [2011-02-13 23:01:04 | 000,352,784 | ---- | C] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\4227559.sys [2011-02-13 23:01:04 | 000,157,712 | ---- | C] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\42275591.sys [2011-02-13 23:01:04 | 000,040,464 | ---- | C] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\42275592.sys [2011-02-13 23:01:04 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Desktop\Virus Removal Tool [2011-02-13 23:00:29 | 091,623,800 | ---- | C] ( ) -- C:\Users\Mateusz\Desktop\setup_9.0.0.722_14.02.2011_00-12.exe [2011-02-13 22:57:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab Setup Files [2011-02-13 22:56:49 | 115,832,504 | ---- | C] (Kaspersky Lab) -- C:\Users\Mateusz\Desktop\kis11.0.2.556en.exe [2011-02-09 07:33:24 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll [2011-02-09 07:33:23 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2011-02-09 07:33:23 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll [2011-02-09 07:33:23 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll [2011-02-09 07:33:23 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2011-02-09 07:33:23 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2011-02-09 07:33:23 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll [2011-02-09 07:33:23 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll [2011-02-09 07:33:23 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe [2011-02-09 07:33:22 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec [2011-02-09 07:33:22 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec [2011-02-09 07:33:22 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe [2011-02-09 07:33:16 | 000,264,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\upnp.dll [2011-02-09 07:33:16 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\upnp.dll [2011-02-09 07:33:15 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\davclnt.dll [2011-02-09 07:33:15 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\davclnt.dll [2011-02-09 07:33:15 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscapi.dll [2011-02-09 07:33:15 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscapi.dll [2011-02-09 07:33:15 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\slwga.dll [2011-02-09 07:33:15 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\slwga.dll [2011-02-09 07:33:13 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll [2011-02-09 07:33:11 | 000,852,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2011-02-09 07:33:11 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2011-02-09 07:33:11 | 000,612,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2011-02-09 07:33:11 | 000,265,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys [2011-02-09 07:33:11 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll [2011-02-09 07:33:10 | 005,510,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2011-02-09 07:33:10 | 001,739,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll [2011-02-09 07:33:09 | 003,957,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2011-02-09 07:33:09 | 003,901,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2011-02-09 07:33:09 | 000,366,080 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2011-02-09 07:33:09 | 000,294,400 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2011-02-09 07:33:09 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll [2011-02-09 07:33:09 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll [2011-01-31 18:21:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Odkurzacz [2011-01-31 18:18:21 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Desktop\studia [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] File not found -- C:\Users\Mateusz\Desktop\analiza.rar [2011-02-14 01:33:50 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Mateusz\Desktop\OTL.exe [2011-02-14 01:31:41 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Mateusz\Desktop\OTL.com [2011-02-14 01:29:31 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl [2011-02-14 01:29:25 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011-02-14 01:29:17 | 3112,587,264 | -HS- | M] () -- C:\hiberfil.sys [2011-02-14 01:24:30 | 000,001,046 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011-02-14 01:17:08 | 000,708,152 | ---- | M] (Duplex Secure Ltd.) -- C:\Users\Mateusz\Desktop\SPTDinst-v176-x64.exe [2011-02-14 01:12:35 | 000,595,000 | ---- | M] (Duplex Secure Ltd.) -- C:\Users\Mateusz\Desktop\SPTDinst-v176-x86.exe [2011-02-14 01:07:43 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011-02-14 01:07:42 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011-02-14 01:07:09 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempgO3348.html [2011-02-14 01:07:09 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempAE3348.html [2011-02-13 23:01:48 | 000,002,219 | ---- | M] () -- C:\Users\Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\setup_9.0.0.722_14.02.2011_00-12.lnk [2011-02-13 23:00:50 | 091,623,800 | ---- | M] ( ) -- C:\Users\Mateusz\Desktop\setup_9.0.0.722_14.02.2011_00-12.exe [2011-02-13 22:57:31 | 115,832,504 | ---- | M] (Kaspersky Lab) -- C:\Users\Mateusz\Desktop\kis11.0.2.556en.exe [2011-02-13 22:28:44 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempme3320.html [2011-02-13 22:16:03 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempAv3120.html [2011-02-13 22:16:03 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempBK3120.html [2011-02-13 18:29:36 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempLJ2172.html [2011-02-13 18:29:36 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempkg2172.html [2011-02-13 18:19:02 | 000,001,050 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011-02-13 15:26:04 | 001,549,696 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011-02-13 15:26:04 | 000,697,912 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2011-02-13 15:26:04 | 000,616,008 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011-02-13 15:26:04 | 000,134,990 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2011-02-13 15:26:04 | 000,106,388 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2011-02-13 11:10:03 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TemptE3332.html [2011-02-13 11:10:03 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempEJ3332.html [2011-02-12 23:11:12 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempJr1804.html [2011-02-12 23:11:12 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempoD1804.html [2011-02-12 21:48:43 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempdP4620.html [2011-02-12 21:48:43 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TemppC4620.html [2011-02-12 19:30:10 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempAZ3724.html [2011-02-12 18:43:07 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempnj2968.html [2011-02-12 14:07:00 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempjO3056.html [2011-02-12 14:07:00 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Temphe3056.html [2011-02-12 13:40:54 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempIX3032.html [2011-02-12 13:40:54 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TemplT3032.html [2011-02-12 12:19:41 | 000,002,344 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2011-02-12 00:56:32 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempWj5052.html [2011-02-12 00:56:32 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Templm5052.html [2011-02-11 15:16:29 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Temped1720.html [2011-02-11 13:03:47 | 000,116,809 | ---- | M] () -- C:\Users\Mateusz\Desktop\1.jpeg [2011-02-11 01:18:58 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempZN3208.html [2011-02-10 22:31:35 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempKO3276.html [2011-02-10 22:29:53 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempcx3088.html [2011-02-10 07:31:15 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempFi2032.html [2011-02-10 07:31:15 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempWl2032.html [2011-02-10 01:31:28 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempVG2040.html [2011-02-10 01:31:28 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempkp2040.html [2011-02-10 01:21:45 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempDq2700.html [2011-02-09 20:20:41 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempwG3112.html [2011-02-09 20:20:41 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempZt3112.html [2011-02-09 15:36:52 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempYf3020.html [2011-02-09 15:36:52 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempSJ3020.html [2011-02-09 11:08:01 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempsP2152.html [2011-02-09 11:08:01 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempSn2152.html [2011-02-09 10:35:29 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempZD2928.html [2011-02-09 10:35:29 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempqv2928.html [2011-02-09 10:30:16 | 000,402,784 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2011-02-09 09:51:20 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempwv3036.html [2011-02-09 09:51:20 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempnj3036.html [2011-02-09 01:21:03 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempjv3116.html [2011-02-09 01:21:03 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempRp3116.html [2011-02-09 00:41:24 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempOc2932.html [2011-02-09 00:41:24 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempuE2932.html [2011-02-08 23:37:17 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempjp3128.html [2011-02-08 18:31:29 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempVn1248.html [2011-02-08 18:31:29 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempDJ1248.html [2011-02-08 14:06:30 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempgv4736.html [2011-02-08 14:06:30 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempVm4736.html [2011-02-08 13:42:08 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempOc3432.html [2011-02-08 10:59:03 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempLV3316.html [2011-02-08 10:59:03 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempzP3316.html [2011-02-07 23:05:36 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempJY3296.html [2011-02-07 23:05:36 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempWA3296.html [2011-02-07 16:18:06 | 000,000,340 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForMateusz.job [2011-02-07 13:26:01 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempfs3132.html [2011-02-07 13:26:01 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempuG3132.html [2011-02-07 11:38:46 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempQe3248.html [2011-02-07 11:38:46 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempsV3248.html [2011-02-07 11:25:13 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempED3240.html [2011-02-07 11:25:13 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempzh3240.html [2011-02-07 00:10:54 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TemphU2532.html [2011-02-07 00:10:54 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Temptg2532.html [2011-02-06 11:29:36 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempvl2124.html [2011-02-06 11:29:36 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempaL2124.html [2011-02-06 01:19:54 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempyg1028.html [2011-02-06 01:19:54 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempYv1028.html [2011-02-05 23:54:21 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempEu2956.html [2011-02-05 17:19:42 | 000,381,834 | ---- | M] () -- C:\Users\Mateusz\Desktop\002kpce.jpg [2011-02-05 15:52:32 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempHF2992.html [2011-02-05 15:52:32 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempMb2992.html [2011-02-05 11:56:40 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempQz1824.html [2011-02-05 02:40:40 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Templj4336.html [2011-02-05 02:40:40 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Templw4336.html [2011-02-04 21:36:04 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempAo3056.html [2011-02-04 20:58:08 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempLm3264.html [2011-02-04 20:47:18 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempbE2776.html [2011-02-04 20:47:18 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Temprr2776.html [2011-02-04 20:38:26 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempbn2744.html [2011-02-04 20:38:26 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempGY2744.html [2011-02-04 18:50:25 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempoR2632.html [2011-02-04 02:39:30 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempHv2112.html [2011-02-04 02:39:30 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempPy2112.html [2011-02-04 01:41:00 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempUM2884.html [2011-02-04 01:41:00 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempDU2884.html [2011-02-03 15:42:28 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempHB2720.html [2011-02-03 15:42:28 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempcG2720.html [2011-02-03 14:16:03 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempOe2888.html [2011-02-03 14:16:03 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempZc2888.html [2011-02-03 12:32:07 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempLH2888.html [2011-02-03 12:32:07 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Temprk2888.html [2011-02-03 11:58:18 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempnW3000.html [2011-02-03 11:58:18 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempvI3000.html [2011-02-03 02:23:47 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempZo5476.html [2011-02-03 02:23:47 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempkk5476.html [2011-02-03 02:10:11 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempOa2736.html [2011-02-03 00:50:40 | 006,836,923 | ---- | M] () -- C:\Users\Mateusz\Desktop\Analiza matematyczna 2 Definicje, twierdzenia, wzory.pdf [2011-02-02 20:22:23 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempAYq264.html [2011-02-02 20:22:23 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempmaO264.html [2011-02-02 18:04:11 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempsY1376.html [2011-02-02 16:48:46 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempBU2928.html [2011-02-02 16:48:46 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TemphE2928.html [2011-02-02 01:02:25 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempuz2372.html [2011-02-01 11:05:43 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Temprq2884.html [2011-02-01 11:05:43 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempDw2884.html [2011-02-01 09:42:45 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempfw2124.html [2011-02-01 09:42:45 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempLg2124.html [2011-02-01 00:39:31 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempKb3284.html [2011-02-01 00:39:31 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempTB3284.html [2011-01-31 23:34:56 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempQv4720.html [2011-01-31 23:34:56 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempOU4720.html [2011-01-31 18:21:41 | 000,001,185 | ---- | M] () -- C:\Users\Mateusz\Desktop\Szybkie Czyszczenie Dysku.lnk [2011-01-31 18:21:41 | 000,001,089 | ---- | M] () -- C:\Users\Mateusz\Desktop\Odkurzacz.lnk [2011-01-27 12:32:56 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempgtg340.html [2011-01-27 12:32:56 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempdgI340.html [2011-01-26 07:53:10 | 000,265,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys [2011-01-26 07:31:20 | 000,144,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll [2011-01-25 20:15:50 | 000,008,330 | -H-- | M] () -- C:\Users\Mateusz\Desktop\folder.jpg [2011-01-23 20:30:46 | 000,000,275 | ---- | M] () -- C:\Users\Mateusz\Documents\Dokuments.rtf [2011-01-17 23:40:00 | 000,045,190 | ---- | M] () -- C:\Users\Mateusz\Documents\j.rtf [2011-01-17 23:39:57 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\j.rtf [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-02-14 01:03:20 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempgO3348.html [2011-02-14 01:03:20 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempAE3348.html [2011-02-13 23:01:48 | 000,002,219 | ---- | C] () -- C:\Users\Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\setup_9.0.0.722_14.02.2011_00-12.lnk [2011-02-13 22:27:37 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempme3320.html [2011-02-13 21:49:52 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempAv3120.html [2011-02-13 21:49:52 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempBK3120.html [2011-02-13 13:48:32 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempLJ2172.html [2011-02-13 13:48:32 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempkg2172.html [2011-02-13 10:33:06 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemptE3332.html [2011-02-13 10:33:06 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempEJ3332.html [2011-02-12 22:47:17 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempJr1804.html [2011-02-12 22:47:17 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempoD1804.html [2011-02-12 20:09:12 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempdP4620.html [2011-02-12 20:09:12 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemppC4620.html [2011-02-12 19:18:27 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempAZ3724.html [2011-02-12 14:46:28 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempnj2968.html [2011-02-12 13:58:48 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempjO3056.html [2011-02-12 13:58:48 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Temphe3056.html [2011-02-12 11:27:40 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempIX3032.html [2011-02-12 11:27:40 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemplT3032.html [2011-02-11 15:46:29 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempWj5052.html [2011-02-11 15:46:29 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Templm5052.html [2011-02-11 13:03:45 | 000,116,809 | ---- | C] () -- C:\Users\Mateusz\Desktop\1.jpeg [2011-02-11 11:37:57 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Temped1720.html [2011-02-10 23:13:54 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempZN3208.html [2011-02-10 22:31:13 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempKO3276.html [2011-02-10 11:22:08 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempcx3088.html [2011-02-10 07:05:10 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempFi2032.html [2011-02-10 07:05:10 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempWl2032.html [2011-02-10 01:28:35 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempVG2040.html [2011-02-10 01:28:35 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempkp2040.html [2011-02-10 00:54:25 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempDq2700.html [2011-02-09 15:37:56 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempwG3112.html [2011-02-09 15:37:56 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempZt3112.html [2011-02-09 15:33:29 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempYf3020.html [2011-02-09 15:33:29 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempSJ3020.html [2011-02-09 11:06:58 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempsP2152.html [2011-02-09 11:06:58 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempSn2152.html [2011-02-09 10:30:54 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempZD2928.html [2011-02-09 10:30:54 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempqv2928.html [2011-02-09 07:26:25 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempwv3036.html [2011-02-09 07:26:25 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempnj3036.html [2011-02-09 01:16:32 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempjv3116.html [2011-02-09 01:16:32 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempRp3116.html [2011-02-08 23:58:37 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempOc2932.html [2011-02-08 23:58:37 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempuE2932.html [2011-02-08 18:56:27 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempjp3128.html [2011-02-08 16:53:48 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempVn1248.html [2011-02-08 16:53:48 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempDJ1248.html [2011-02-08 14:06:19 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempgv4736.html [2011-02-08 14:06:19 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempVm4736.html [2011-02-08 13:40:58 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempOc3432.html [2011-02-08 10:59:03 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempLV3316.html [2011-02-08 10:59:03 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempzP3316.html [2011-02-07 16:18:30 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempJY3296.html [2011-02-07 16:18:30 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempWA3296.html [2011-02-07 13:12:11 | 000,000,340 | ---- | C] () -- C:\Windows\tasks\HPCeeScheduleForMateusz.job [2011-02-07 12:56:18 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempfs3132.html [2011-02-07 12:56:18 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempuG3132.html [2011-02-07 11:31:49 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempQe3248.html [2011-02-07 11:31:49 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempsV3248.html [2011-02-07 10:13:05 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempED3240.html [2011-02-07 10:13:05 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempzh3240.html [2011-02-06 14:42:53 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemphU2532.html [2011-02-06 14:42:53 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Temptg2532.html [2011-02-06 11:04:37 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempvl2124.html [2011-02-06 11:04:37 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempaL2124.html [2011-02-06 00:19:51 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempyg1028.html [2011-02-06 00:19:51 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempYv1028.html [2011-02-05 17:19:41 | 000,381,834 | ---- | C] () -- C:\Users\Mateusz\Desktop\002kpce.jpg [2011-02-05 16:48:43 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempEu2956.html [2011-02-05 14:30:11 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempHF2992.html [2011-02-05 14:30:11 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempMb2992.html [2011-02-05 11:50:40 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempQz1824.html [2011-02-04 21:48:04 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Templj4336.html [2011-02-04 21:48:04 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Templw4336.html [2011-02-04 21:29:31 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempAo3056.html [2011-02-04 20:55:49 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempLm3264.html [2011-02-04 20:45:41 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempbE2776.html [2011-02-04 20:45:41 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Temprr2776.html [2011-02-04 19:46:30 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempbn2744.html [2011-02-04 19:46:30 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempGY2744.html [2011-02-04 12:45:04 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempoR2632.html [2011-02-04 02:35:59 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempHv2112.html [2011-02-04 02:35:59 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempPy2112.html [2011-02-03 16:31:23 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempUM2884.html [2011-02-03 16:31:23 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempDU2884.html [2011-02-03 15:35:40 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempHB2720.html [2011-02-03 15:35:40 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempcG2720.html [2011-02-03 14:08:58 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempOe2888.html [2011-02-03 14:08:58 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempZc2888.html [2011-02-03 12:24:26 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempLH2888.html [2011-02-03 12:24:26 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Temprk2888.html [2011-02-03 11:44:50 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempnW3000.html [2011-02-03 11:44:50 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempvI3000.html [2011-02-03 02:14:05 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempZo5476.html [2011-02-03 02:14:05 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempkk5476.html [2011-02-03 00:49:48 | 006,836,923 | ---- | C] () -- C:\Users\Mateusz\Desktop\Analiza matematyczna 2 Definicje, twierdzenia, wzory.pdf [2011-02-02 23:41:23 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempOa2736.html [2011-02-02 19:05:30 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempAYq264.html [2011-02-02 19:05:30 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempmaO264.html [2011-02-02 17:35:35 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempsY1376.html [2011-02-02 12:54:04 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempBU2928.html [2011-02-02 12:54:04 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemphE2928.html [2011-02-01 22:02:35 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempuz2372.html [2011-02-01 10:52:45 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Temprq2884.html [2011-02-01 10:52:45 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempDw2884.html [2011-02-01 09:10:20 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempfw2124.html [2011-02-01 09:10:20 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempLg2124.html [2011-02-01 00:30:23 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempKb3284.html [2011-02-01 00:30:23 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempTB3284.html [2011-01-31 18:59:49 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempQv4720.html [2011-01-31 18:59:49 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempOU4720.html [2011-01-27 10:19:35 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempgtg340.html [2011-01-27 10:19:35 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempdgI340.html [2011-01-25 20:15:50 | 000,008,330 | -H-- | C] () -- C:\Users\Mateusz\Desktop\folder.jpg [2011-01-23 20:30:46 | 000,000,275 | ---- | C] () -- C:\Users\Mateusz\Documents\Dokuments.rtf [2011-01-17 23:39:59 | 000,045,190 | ---- | C] () -- C:\Users\Mateusz\Documents\j.rtf [2011-01-17 23:39:57 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\j.rtf [2011-01-03 12:05:15 | 000,001,854 | ---- | C] () -- C:\Users\Mateusz\AppData\Roaming\GhostObjGAFix.xml [2011-01-02 22:30:43 | 000,000,000 | ---- | C] () -- C:\Users\Mateusz\AppData\Roaming\wklnhst.dat [2010-12-31 12:46:56 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempaZM264.html [2010-12-31 12:46:56 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempKss264.html [2010-12-31 11:25:15 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempEkA952.html [2010-12-31 11:25:15 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempdaa952.html [2010-12-24 17:44:45 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempNfV752.html [2010-12-24 17:44:45 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempacI752.html [2010-12-20 20:37:51 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Temppsw484.html [2010-12-20 20:37:51 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempaJX484.html [2010-12-16 21:39:38 | 000,000,412 | ---- | C] () -- C:\Windows\ODBC.INI [2010-12-15 19:08:18 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempADQ768.html [2010-12-15 19:08:18 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempfCQ768.html [2010-12-11 11:56:24 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempmZt700.html [2010-12-11 11:56:24 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempTLj700.html [2010-12-06 14:59:03 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempMQX832.html [2010-12-06 14:59:03 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemplqK832.html [2010-12-02 13:18:14 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempOdl372.html [2010-12-02 13:18:14 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempiWD372.html [2010-11-23 17:33:34 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempUQo424.html [2010-11-23 17:33:34 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempBpr424.html [2010-11-20 23:57:24 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempKHf356.html [2010-11-19 23:14:14 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemphpM920.html [2010-11-15 10:41:53 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemprVw348.html [2010-11-15 10:41:53 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempuAu348.html [2010-11-09 19:50:56 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempuOY552.html [2010-11-09 19:50:56 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempyLH552.html [2010-11-06 11:38:41 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempDvt692.html [2010-11-06 11:38:41 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempJpY692.html [2010-10-24 20:53:23 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempkfh512.html [2010-10-24 20:53:23 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempomz512.html [2010-10-14 23:36:50 | 000,000,337 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Perfmon.PerfmonCfg [2010-10-11 11:40:43 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempIjG744.html [2010-10-11 11:40:43 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempAZY744.html [2010-10-05 10:22:15 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempMwM640.html [2010-10-05 10:22:15 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempUoO640.html [2010-10-03 12:40:30 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempamr252.html [2010-10-03 12:40:30 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempjmr252.html [2010-09-30 05:17:10 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempBmJ252.html [2010-09-30 05:17:10 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempTgy252.html [2010-09-26 13:13:07 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempfcV248.html [2010-09-26 13:13:07 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempiWO248.html [2010-09-23 17:00:45 | 000,001,440 | ---- | C] () -- C:\ProgramData\hpzinstall.log [2010-08-27 20:44:31 | 000,000,021 | ---- | C] () -- C:\Windows\kit.ini [2010-08-27 20:32:25 | 000,000,000 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\QSwitch.txt [2010-08-27 20:32:25 | 000,000,000 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\DSwitch.txt [2010-08-27 20:32:25 | 000,000,000 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\AtStart.txt [2010-08-27 20:32:22 | 000,000,176 | ---- | C] () -- C:\ProgramData\HPWALog.txt [2010-02-11 22:38:09 | 000,000,109 | ---- | C] () -- C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log [2010-02-11 22:35:47 | 000,000,110 | ---- | C] () -- C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log [2010-02-11 22:34:59 | 000,000,105 | ---- | C] () -- C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log [2010-02-11 22:34:37 | 000,000,107 | ---- | C] () -- C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log [2010-02-11 01:36:17 | 000,000,105 | ---- | C] () -- C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log [2010-02-11 01:36:12 | 000,000,032 | ---- | C] () -- C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log [2010-02-11 01:36:00 | 000,000,032 | ---- | C] () -- C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log [2010-02-11 01:35:42 | 000,000,032 | ---- | C] () -- C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log [2010-02-11 01:35:08 | 000,000,032 | ---- | C] () -- C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log [2010-02-11 01:20:39 | 000,000,268 | ---- | C] () -- C:\Windows\SysWow64\RStoneLog2.ini [2010-02-11 01:20:39 | 000,000,209 | ---- | C] () -- C:\Windows\SysWow64\RStoneLog.ini [2009-09-29 15:25:16 | 000,013,312 | ---- | C] () -- C:\Windows\LPRES.DLL [2009-07-14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2003-04-08 11:40:22 | 000,005,679 | ---- | C] () -- C:\Windows\SysWow64\OUTLPERF.INI [color=#E56717]========== LOP Check ==========[/color] [2010-11-30 11:20:32 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\DAEMON Tools Lite [2010-11-02 10:45:18 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Gadu-Gadu 10 [2011-01-31 18:44:18 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\ipla [2010-12-31 21:13:38 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Microgaming [2010-08-29 21:23:09 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\OpenFM [2010-09-11 14:36:13 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Opera [2010-10-24 20:58:13 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\RayV [2011-01-02 22:30:44 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Template [2010-08-29 20:22:54 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Tific [2010-12-29 16:02:23 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\_MDLogs [2011-01-21 11:34:45 | 000,032,604 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] < End of report >

Kod: Zaznacz wszystko: OTL logfile created on: 2011-02-14 01:34:22 - Run 1 OTL by OldTimer - Version 3.2.20.6 Folder = C:\Users\Mateusz\Desktop 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 81,00% Memory free 8,00 Gb Paging File | 7,00 Gb Available in Paging File | 91,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 452,91 Gb Total Space | 389,53 Gb Free Space | 86,01% Space Free | Partition Type: NTFS Drive D: | 12,55 Gb Total Space | 2,10 Gb Free Space | 16,71% Space Free | Partition Type: NTFS Drive E: | 99,02 Mb Total Space | 92,36 Mb Free Space | 93,27% Space Free | Partition Type: FAT32 Computer Name: OSTROWSKI | User Name: Mateusz | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-02-14 01:33:50 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Mateusz\Desktop\OTL.exe PRC - [2010-12-10 12:47:59 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-02-14 01:33:50 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Mateusz\Desktop\OTL.exe MOD - [2010-08-21 06:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2009-11-25 07:17:18 | 000,202,752 | ---- | M] (AMD) [Auto | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2009-11-18 03:14:26 | 000,098,208 | ---- | M] (Andrea Electronics Corporation) [Auto | Stopped] -- C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe -- (AERTFilters) SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2010-10-14 17:27:38 | 000,092,216 | ---- | M] (Hewlett-Packard Company) [Auto | Stopped] -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe -- (HPDrvMntSvc.exe) SRV - [2010-08-28 01:31:12 | 000,581,632 | ---- | M] (THOMSON Telecom Belgium) [Auto | Stopped] -- C:\Program Files (x86)\Thomson\ST330\service\st330service.exe -- (st330service) SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009-10-01 05:01:32 | 002,320,920 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R) SRV - [2009-10-01 05:01:30 | 000,268,824 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R) SRV - [2009-09-20 10:55:20 | 001,037,824 | ---- | M] (Hewlett-Packard Co.) [Auto | Stopped] -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL -- (HPSLPSVC) SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2009-06-06 01:07:28 | 000,250,616 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe -- (GameConsoleService) SRV - [2009-02-22 12:00:00 | 000,129,584 | ---- | M] (EasyBits Sofware AS) [Auto | Stopped] -- C:\Windows\SysWOW64\ezsvc7.dll -- (ezSharedSvc) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2010-11-29 20:41:47 | 000,834,544 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2010-08-28 01:31:12 | 000,054,272 | ---- | M] (THOMSON Telecom Belgium) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stppp.sys -- (stppp) DRV:[b]64bit:[/b] - [2010-08-27 22:42:23 | 000,058,880 | ---- | M] (THOMSON Telecom Belgium) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\steth.sys -- (STETH) DRV:[b]64bit:[/b] - [2010-08-27 22:42:23 | 000,047,616 | ---- | M] (THOMSON Telecom Belgium) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\st330.sys -- (ST330) DRV:[b]64bit:[/b] - [2010-08-27 22:42:23 | 000,024,576 | ---- | M] (THOMSON Telecom Belgium) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stbus.sys -- (STBUS) DRV:[b]64bit:[/b] - [2009-11-25 07:52:16 | 006,174,720 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV:[b]64bit:[/b] - [2009-11-19 03:30:56 | 000,123,408 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService) DRV:[b]64bit:[/b] - [2009-11-03 19:59:04 | 000,299,056 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:[b]64bit:[/b] - [2009-10-24 02:53:00 | 000,291,328 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2009-10-22 12:54:24 | 000,040,464 | ---- | M] (Kaspersky Lab) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\42275592.sys -- (42275592) DRV:[b]64bit:[/b] - [2009-10-13 11:16:40 | 000,409,624 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2009-10-09 22:30:56 | 000,352,784 | ---- | M] (Kaspersky Lab) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\4227559.sys -- (setup_9.0.0.722_14.02.2011_00-12drv) DRV:[b]64bit:[/b] - [2009-10-05 09:34:00 | 001,542,656 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:[b]64bit:[/b] - [2009-09-25 16:59:46 | 000,157,712 | ---- | M] (Kaspersky Lab) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\42275591.sys -- (42275591) DRV:[b]64bit:[/b] - [2009-09-23 02:39:00 | 000,225,280 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR) DRV:[b]64bit:[/b] - [2009-09-17 21:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R) DRV:[b]64bit:[/b] - [2009-08-09 22:25:45 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone) DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-14 00:31:10 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2009-06-10 22:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92) DRV:[b]64bit:[/b] - [2009-06-10 22:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac) DRV:[b]64bit:[/b] - [2009-06-10 22:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA) DRV:[b]64bit:[/b] - [2009-06-10 22:01:06 | 001,146,880 | ---- | M] (LSI Corp) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem) DRV:[b]64bit:[/b] - [2009-06-10 21:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs) DRV:[b]64bit:[/b] - [2009-06-10 21:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:[b]64bit:[/b] - [2009-06-10 21:35:33 | 000,389,120 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7) DRV:[b]64bit:[/b] - [2009-06-10 21:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64) Intel(R) DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-04-29 08:48:32 | 000,018,432 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HpqKbFiltr.sys -- (HpqKbFiltr) DRV - [2009-09-23 02:39:00 | 000,225,280 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\RtsUStor.sys -- (RSUSBSTOR) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com IE - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/?pc=AVBR IE - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://vshare.toolbarhome.com/?hp=df [binary data] IE - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.mydtzone.com/startpage IE - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.mydtzone.com/startpage|http://vshare.toolbarhome.com/?hp=df" FF - prefs.js..extensions.enabledItems: smartwebprinting@hp.com:4.51 FF - prefs.js..extensions.enabledItems: vshare@toolbar:1.0.0 FF - prefs.js..keyword.URL: "http://vshare.toolbarhome.com/search.aspx?srch=ku&q=" FF - HKLM\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-09-23 18:12:07 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010-12-10 12:48:00 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010-12-16 21:39:08 | 000,000,000 | ---D | M] [2010-09-16 16:08:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\Extensions [2011-02-14 01:31:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\Firefox\Profiles\742vx3ig.default\extensions [2010-09-25 14:26:31 | 000,000,000 | ---D | M] (vShare Plugin) -- C:\Users\Mateusz\AppData\Roaming\mozilla\Firefox\Profiles\742vx3ig.default\extensions\vshare@toolbar [2010-11-29 20:42:25 | 000,002,059 | ---- | M] () -- C:\Users\Mateusz\AppData\Roaming\Mozilla\Firefox\Profiles\742vx3ig.default\searchplugins\daemon-search.xml [2010-09-25 14:26:50 | 000,001,583 | ---- | M] () -- C:\Users\Mateusz\AppData\Roaming\Mozilla\Firefox\Profiles\742vx3ig.default\searchplugins\web-search.xml [2010-09-16 16:21:55 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2010-09-23 18:12:07 | 000,000,000 | ---D | M] (HP Smart Web Printing) -- C:\PROGRAM FILES (X86)\HP\DIGITAL IMAGING\SMART WEB PRINTING\MOZILLAADDON3 [2010-09-14 22:29:36 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2010-09-14 22:29:36 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2010-09-14 22:29:36 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2010-09-14 22:29:36 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2010-09-14 22:29:36 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2010-09-14 22:29:36 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2009-06-10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) O2 - BHO: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll () O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - File not found O3 - HKLM\..\Toolbar: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll () O3 - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\..\Toolbar\WebBrowser: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll () O4:[b]64bit:[/b] - HKLM..\Run: [diagnostics] C:\Program Files (x86)\Thomson\ST330\diagnostics\diagnostics.exe (THOMSON Telecom Belgium) O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [RtkOSD] C:\Program Files (x86)\Realtek\Audio\OSD\RtVOsd64.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [diagnostics] C:\Program Files (x86)\Thomson SpeedTouch\ST330\diagnostics\diagnostics.exe (THOMSON Telecom Belgium) O4 - HKLM..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe (EasyBits Software AS) O4 - HKLM..\Run: [SpeedTouch USB Diagnostics] C:\Program Files (x86)\Thomson\SpeedTouch USB\Dragdiag.exe (THOMSON Telecom Belgium) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000..\Run: [Gadu-Gadu 10] C:\Program Files (x86)\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000..\Run: [Odkurzacz-MCD] C:\Program Files (x86)\Odkurzacz\odk_mcd.exe (Franmo Software) O4 - Startup: C:\Users\Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\setup_9.0.0.722_14.02.2011_00-12.lnk = C:\Users\Mateusz\Desktop\Virus Removal Tool\setup_9.0.0.722_14.02.2011_00-12\startup.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0 O7 - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95 00 00 00 [binary data] O7 - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0 O7 - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0 O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra Button: Pokaż lub ukryj HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 153.19.208.50 153.19.208.2 O18:[b]64bit:[/b] - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\vsharechrome {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - Reg Error: Key error. File not found O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Handler\vsharechrome {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - C:\Program Files (x86)\vShare\vshare_toolbar.dll () O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O28 - HKLM ShellExecuteHooks: {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll (EasyBits Software Corp.) O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{2c35c6b3-fbf1-11df-a924-c80aa96dc959}\Shell - "" = AutoRun O33 - MountPoints2\{2c35c6b3-fbf1-11df-a924-c80aa96dc959}\Shell\AutoRun\command - "" = H:\Autorun.exe O33 - MountPoints2\{a63bdd8f-b53f-11df-9a9a-c80aa96dc959}\Shell - "" = AutoRun O33 - MountPoints2\{a63bdd8f-b53f-11df-9a9a-c80aa96dc959}\Shell\AutoRun\command - "" = G:\Autorun.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] File not found -- C:\Users\Mateusz\Desktop\analiza.rar [2011-02-14 01:33:49 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Users\Mateusz\Desktop\OTL.exe [2011-02-14 01:31:38 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Users\Mateusz\Desktop\OTL.com [2011-02-14 01:17:08 | 000,708,152 | ---- | C] (Duplex Secure Ltd.) -- C:\Users\Mateusz\Desktop\SPTDinst-v176-x64.exe [2011-02-14 01:12:34 | 000,595,000 | ---- | C] (Duplex Secure Ltd.) -- C:\Users\Mateusz\Desktop\SPTDinst-v176-x86.exe [2011-02-13 23:01:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab [2011-02-13 23:01:04 | 000,352,784 | ---- | C] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\4227559.sys [2011-02-13 23:01:04 | 000,157,712 | ---- | C] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\42275591.sys [2011-02-13 23:01:04 | 000,040,464 | ---- | C] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\42275592.sys [2011-02-13 23:01:04 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Desktop\Virus Removal Tool [2011-02-13 23:00:29 | 091,623,800 | ---- | C] ( ) -- C:\Users\Mateusz\Desktop\setup_9.0.0.722_14.02.2011_00-12.exe [2011-02-13 22:57:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab Setup Files [2011-02-13 22:56:49 | 115,832,504 | ---- | C] (Kaspersky Lab) -- C:\Users\Mateusz\Desktop\kis11.0.2.556en.exe [2011-02-09 07:33:24 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll [2011-02-09 07:33:23 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2011-02-09 07:33:23 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll [2011-02-09 07:33:23 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll [2011-02-09 07:33:23 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2011-02-09 07:33:23 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2011-02-09 07:33:23 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll [2011-02-09 07:33:23 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll [2011-02-09 07:33:23 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe [2011-02-09 07:33:22 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec [2011-02-09 07:33:22 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec [2011-02-09 07:33:22 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe [2011-02-09 07:33:16 | 000,264,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\upnp.dll [2011-02-09 07:33:16 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\upnp.dll [2011-02-09 07:33:15 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\davclnt.dll [2011-02-09 07:33:15 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\davclnt.dll [2011-02-09 07:33:15 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscapi.dll [2011-02-09 07:33:15 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscapi.dll [2011-02-09 07:33:15 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\slwga.dll [2011-02-09 07:33:15 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\slwga.dll [2011-02-09 07:33:13 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll [2011-02-09 07:33:11 | 000,852,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2011-02-09 07:33:11 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2011-02-09 07:33:11 | 000,612,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2011-02-09 07:33:11 | 000,265,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys [2011-02-09 07:33:11 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll [2011-02-09 07:33:10 | 005,510,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2011-02-09 07:33:10 | 001,739,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll [2011-02-09 07:33:09 | 003,957,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2011-02-09 07:33:09 | 003,901,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2011-02-09 07:33:09 | 000,366,080 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2011-02-09 07:33:09 | 000,294,400 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2011-02-09 07:33:09 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll [2011-02-09 07:33:09 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll [2011-01-31 18:21:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Odkurzacz [2011-01-31 18:18:21 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Desktop\studia [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] File not found -- C:\Users\Mateusz\Desktop\analiza.rar [2011-02-14 01:33:50 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Mateusz\Desktop\OTL.exe [2011-02-14 01:31:41 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Mateusz\Desktop\OTL.com [2011-02-14 01:29:31 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl [2011-02-14 01:29:25 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011-02-14 01:29:17 | 3112,587,264 | -HS- | M] () -- C:\hiberfil.sys [2011-02-14 01:24:30 | 000,001,046 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011-02-14 01:17:08 | 000,708,152 | ---- | M] (Duplex Secure Ltd.) -- C:\Users\Mateusz\Desktop\SPTDinst-v176-x64.exe [2011-02-14 01:12:35 | 000,595,000 | ---- | M] (Duplex Secure Ltd.) -- C:\Users\Mateusz\Desktop\SPTDinst-v176-x86.exe [2011-02-14 01:07:43 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011-02-14 01:07:42 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011-02-14 01:07:09 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempgO3348.html [2011-02-14 01:07:09 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempAE3348.html [2011-02-13 23:01:48 | 000,002,219 | ---- | M] () -- C:\Users\Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\setup_9.0.0.722_14.02.2011_00-12.lnk [2011-02-13 23:00:50 | 091,623,800 | ---- | M] ( ) -- C:\Users\Mateusz\Desktop\setup_9.0.0.722_14.02.2011_00-12.exe [2011-02-13 22:57:31 | 115,832,504 | ---- | M] (Kaspersky Lab) -- C:\Users\Mateusz\Desktop\kis11.0.2.556en.exe [2011-02-13 22:28:44 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempme3320.html [2011-02-13 22:16:03 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempAv3120.html [2011-02-13 22:16:03 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempBK3120.html [2011-02-13 18:29:36 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempLJ2172.html [2011-02-13 18:29:36 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempkg2172.html [2011-02-13 18:19:02 | 000,001,050 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011-02-13 15:26:04 | 001,549,696 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011-02-13 15:26:04 | 000,697,912 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2011-02-13 15:26:04 | 000,616,008 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011-02-13 15:26:04 | 000,134,990 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2011-02-13 15:26:04 | 000,106,388 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2011-02-13 11:10:03 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TemptE3332.html [2011-02-13 11:10:03 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempEJ3332.html [2011-02-12 23:11:12 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempJr1804.html [2011-02-12 23:11:12 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempoD1804.html [2011-02-12 21:48:43 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempdP4620.html [2011-02-12 21:48:43 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TemppC4620.html [2011-02-12 19:30:10 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempAZ3724.html [2011-02-12 18:43:07 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempnj2968.html [2011-02-12 14:07:00 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempjO3056.html [2011-02-12 14:07:00 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Temphe3056.html [2011-02-12 13:40:54 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempIX3032.html [2011-02-12 13:40:54 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TemplT3032.html [2011-02-12 12:19:41 | 000,002,344 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2011-02-12 00:56:32 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempWj5052.html [2011-02-12 00:56:32 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Templm5052.html [2011-02-11 15:16:29 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Temped1720.html [2011-02-11 13:03:47 | 000,116,809 | ---- | M] () -- C:\Users\Mateusz\Desktop\1.jpeg [2011-02-11 01:18:58 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempZN3208.html [2011-02-10 22:31:35 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempKO3276.html [2011-02-10 22:29:53 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempcx3088.html [2011-02-10 07:31:15 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempFi2032.html [2011-02-10 07:31:15 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempWl2032.html [2011-02-10 01:31:28 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempVG2040.html [2011-02-10 01:31:28 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempkp2040.html [2011-02-10 01:21:45 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempDq2700.html [2011-02-09 20:20:41 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempwG3112.html [2011-02-09 20:20:41 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempZt3112.html [2011-02-09 15:36:52 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempYf3020.html [2011-02-09 15:36:52 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempSJ3020.html [2011-02-09 11:08:01 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempsP2152.html [2011-02-09 11:08:01 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempSn2152.html [2011-02-09 10:35:29 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempZD2928.html [2011-02-09 10:35:29 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempqv2928.html [2011-02-09 10:30:16 | 000,402,784 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2011-02-09 09:51:20 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempwv3036.html [2011-02-09 09:51:20 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempnj3036.html [2011-02-09 01:21:03 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempjv3116.html [2011-02-09 01:21:03 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempRp3116.html [2011-02-09 00:41:24 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempOc2932.html [2011-02-09 00:41:24 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempuE2932.html [2011-02-08 23:37:17 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempjp3128.html [2011-02-08 18:31:29 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempVn1248.html [2011-02-08 18:31:29 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempDJ1248.html [2011-02-08 14:06:30 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempgv4736.html [2011-02-08 14:06:30 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempVm4736.html [2011-02-08 13:42:08 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempOc3432.html [2011-02-08 10:59:03 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempLV3316.html [2011-02-08 10:59:03 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempzP3316.html [2011-02-07 23:05:36 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempJY3296.html [2011-02-07 23:05:36 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempWA3296.html [2011-02-07 16:18:06 | 000,000,340 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForMateusz.job [2011-02-07 13:26:01 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempfs3132.html [2011-02-07 13:26:01 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempuG3132.html [2011-02-07 11:38:46 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempQe3248.html [2011-02-07 11:38:46 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempsV3248.html [2011-02-07 11:25:13 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempED3240.html [2011-02-07 11:25:13 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempzh3240.html [2011-02-07 00:10:54 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TemphU2532.html [2011-02-07 00:10:54 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Temptg2532.html [2011-02-06 11:29:36 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempvl2124.html [2011-02-06 11:29:36 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempaL2124.html [2011-02-06 01:19:54 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempyg1028.html [2011-02-06 01:19:54 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempYv1028.html [2011-02-05 23:54:21 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempEu2956.html [2011-02-05 17:19:42 | 000,381,834 | ---- | M] () -- C:\Users\Mateusz\Desktop\002kpce.jpg [2011-02-05 15:52:32 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempHF2992.html [2011-02-05 15:52:32 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempMb2992.html [2011-02-05 11:56:40 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempQz1824.html [2011-02-05 02:40:40 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Templj4336.html [2011-02-05 02:40:40 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Templw4336.html [2011-02-04 21:36:04 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempAo3056.html [2011-02-04 20:58:08 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempLm3264.html [2011-02-04 20:47:18 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempbE2776.html [2011-02-04 20:47:18 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Temprr2776.html [2011-02-04 20:38:26 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempbn2744.html [2011-02-04 20:38:26 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempGY2744.html [2011-02-04 18:50:25 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempoR2632.html [2011-02-04 02:39:30 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempHv2112.html [2011-02-04 02:39:30 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempPy2112.html [2011-02-04 01:41:00 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempUM2884.html [2011-02-04 01:41:00 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempDU2884.html [2011-02-03 15:42:28 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempHB2720.html [2011-02-03 15:42:28 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempcG2720.html [2011-02-03 14:16:03 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempOe2888.html [2011-02-03 14:16:03 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempZc2888.html [2011-02-03 12:32:07 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempLH2888.html [2011-02-03 12:32:07 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Temprk2888.html [2011-02-03 11:58:18 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempnW3000.html [2011-02-03 11:58:18 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempvI3000.html [2011-02-03 02:23:47 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempZo5476.html [2011-02-03 02:23:47 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempkk5476.html [2011-02-03 02:10:11 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempOa2736.html [2011-02-03 00:50:40 | 006,836,923 | ---- | M] () -- C:\Users\Mateusz\Desktop\Analiza matematyczna 2 Definicje, twierdzenia, wzory.pdf [2011-02-02 20:22:23 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempAYq264.html [2011-02-02 20:22:23 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempmaO264.html [2011-02-02 18:04:11 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempsY1376.html [2011-02-02 16:48:46 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempBU2928.html [2011-02-02 16:48:46 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TemphE2928.html [2011-02-02 01:02:25 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempuz2372.html [2011-02-01 11:05:43 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Temprq2884.html [2011-02-01 11:05:43 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempDw2884.html [2011-02-01 09:42:45 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempfw2124.html [2011-02-01 09:42:45 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempLg2124.html [2011-02-01 00:39:31 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempKb3284.html [2011-02-01 00:39:31 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempTB3284.html [2011-01-31 23:34:56 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempQv4720.html [2011-01-31 23:34:56 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempOU4720.html [2011-01-31 18:21:41 | 000,001,185 | ---- | M] () -- C:\Users\Mateusz\Desktop\Szybkie Czyszczenie Dysku.lnk [2011-01-31 18:21:41 | 000,001,089 | ---- | M] () -- C:\Users\Mateusz\Desktop\Odkurzacz.lnk [2011-01-27 12:32:56 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempgtg340.html [2011-01-27 12:32:56 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempdgI340.html [2011-01-26 07:53:10 | 000,265,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys [2011-01-26 07:31:20 | 000,144,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll [2011-01-25 20:15:50 | 000,008,330 | -H-- | M] () -- C:\Users\Mateusz\Desktop\folder.jpg [2011-01-23 20:30:46 | 000,000,275 | ---- | M] () -- C:\Users\Mateusz\Documents\Dokuments.rtf [2011-01-17 23:40:00 | 000,045,190 | ---- | M] () -- C:\Users\Mateusz\Documents\j.rtf [2011-01-17 23:39:57 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\j.rtf [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-02-14 01:03:20 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempgO3348.html [2011-02-14 01:03:20 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempAE3348.html [2011-02-13 23:01:48 | 000,002,219 | ---- | C] () -- C:\Users\Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\setup_9.0.0.722_14.02.2011_00-12.lnk [2011-02-13 22:27:37 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempme3320.html [2011-02-13 21:49:52 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempAv3120.html [2011-02-13 21:49:52 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempBK3120.html [2011-02-13 13:48:32 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempLJ2172.html [2011-02-13 13:48:32 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempkg2172.html [2011-02-13 10:33:06 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemptE3332.html [2011-02-13 10:33:06 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempEJ3332.html [2011-02-12 22:47:17 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempJr1804.html [2011-02-12 22:47:17 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempoD1804.html [2011-02-12 20:09:12 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempdP4620.html [2011-02-12 20:09:12 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemppC4620.html [2011-02-12 19:18:27 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempAZ3724.html [2011-02-12 14:46:28 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempnj2968.html [2011-02-12 13:58:48 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempjO3056.html [2011-02-12 13:58:48 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Temphe3056.html [2011-02-12 11:27:40 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempIX3032.html [2011-02-12 11:27:40 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemplT3032.html [2011-02-11 15:46:29 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempWj5052.html [2011-02-11 15:46:29 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Templm5052.html [2011-02-11 13:03:45 | 000,116,809 | ---- | C] () -- C:\Users\Mateusz\Desktop\1.jpeg [2011-02-11 11:37:57 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Temped1720.html [2011-02-10 23:13:54 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempZN3208.html [2011-02-10 22:31:13 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempKO3276.html [2011-02-10 11:22:08 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempcx3088.html [2011-02-10 07:05:10 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempFi2032.html [2011-02-10 07:05:10 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempWl2032.html [2011-02-10 01:28:35 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempVG2040.html [2011-02-10 01:28:35 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempkp2040.html [2011-02-10 00:54:25 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempDq2700.html [2011-02-09 15:37:56 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempwG3112.html [2011-02-09 15:37:56 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempZt3112.html [2011-02-09 15:33:29 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempYf3020.html [2011-02-09 15:33:29 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempSJ3020.html [2011-02-09 11:06:58 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempsP2152.html [2011-02-09 11:06:58 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempSn2152.html [2011-02-09 10:30:54 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempZD2928.html [2011-02-09 10:30:54 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempqv2928.html [2011-02-09 07:26:25 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempwv3036.html [2011-02-09 07:26:25 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempnj3036.html [2011-02-09 01:16:32 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempjv3116.html [2011-02-09 01:16:32 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempRp3116.html [2011-02-08 23:58:37 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempOc2932.html [2011-02-08 23:58:37 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempuE2932.html [2011-02-08 18:56:27 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempjp3128.html [2011-02-08 16:53:48 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempVn1248.html [2011-02-08 16:53:48 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempDJ1248.html [2011-02-08 14:06:19 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempgv4736.html [2011-02-08 14:06:19 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempVm4736.html [2011-02-08 13:40:58 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempOc3432.html [2011-02-08 10:59:03 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempLV3316.html [2011-02-08 10:59:03 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempzP3316.html [2011-02-07 16:18:30 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempJY3296.html [2011-02-07 16:18:30 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempWA3296.html [2011-02-07 13:12:11 | 000,000,340 | ---- | C] () -- C:\Windows\tasks\HPCeeScheduleForMateusz.job [2011-02-07 12:56:18 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempfs3132.html [2011-02-07 12:56:18 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempuG3132.html [2011-02-07 11:31:49 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempQe3248.html [2011-02-07 11:31:49 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempsV3248.html [2011-02-07 10:13:05 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempED3240.html [2011-02-07 10:13:05 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempzh3240.html [2011-02-06 14:42:53 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemphU2532.html [2011-02-06 14:42:53 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Temptg2532.html [2011-02-06 11:04:37 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempvl2124.html [2011-02-06 11:04:37 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempaL2124.html [2011-02-06 00:19:51 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempyg1028.html [2011-02-06 00:19:51 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempYv1028.html [2011-02-05 17:19:41 | 000,381,834 | ---- | C] () -- C:\Users\Mateusz\Desktop\002kpce.jpg [2011-02-05 16:48:43 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempEu2956.html [2011-02-05 14:30:11 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempHF2992.html [2011-02-05 14:30:11 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempMb2992.html [2011-02-05 11:50:40 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempQz1824.html [2011-02-04 21:48:04 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Templj4336.html [2011-02-04 21:48:04 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Templw4336.html [2011-02-04 21:29:31 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempAo3056.html [2011-02-04 20:55:49 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempLm3264.html [2011-02-04 20:45:41 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempbE2776.html [2011-02-04 20:45:41 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Temprr2776.html [2011-02-04 19:46:30 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempbn2744.html [2011-02-04 19:46:30 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempGY2744.html [2011-02-04 12:45:04 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempoR2632.html [2011-02-04 02:35:59 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempHv2112.html [2011-02-04 02:35:59 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempPy2112.html [2011-02-03 16:31:23 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempUM2884.html [2011-02-03 16:31:23 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempDU2884.html [2011-02-03 15:35:40 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempHB2720.html [2011-02-03 15:35:40 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempcG2720.html [2011-02-03 14:08:58 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempOe2888.html [2011-02-03 14:08:58 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempZc2888.html [2011-02-03 12:24:26 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempLH2888.html [2011-02-03 12:24:26 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Temprk2888.html [2011-02-03 11:44:50 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempnW3000.html [2011-02-03 11:44:50 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempvI3000.html [2011-02-03 02:14:05 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempZo5476.html [2011-02-03 02:14:05 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempkk5476.html [2011-02-03 00:49:48 | 006,836,923 | ---- | C] () -- C:\Users\Mateusz\Desktop\Analiza matematyczna 2 Definicje, twierdzenia, wzory.pdf [2011-02-02 23:41:23 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempOa2736.html [2011-02-02 19:05:30 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempAYq264.html [2011-02-02 19:05:30 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempmaO264.html [2011-02-02 17:35:35 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempsY1376.html [2011-02-02 12:54:04 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempBU2928.html [2011-02-02 12:54:04 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemphE2928.html [2011-02-01 22:02:35 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempuz2372.html [2011-02-01 10:52:45 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Temprq2884.html [2011-02-01 10:52:45 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempDw2884.html [2011-02-01 09:10:20 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempfw2124.html [2011-02-01 09:10:20 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempLg2124.html [2011-02-01 00:30:23 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempKb3284.html [2011-02-01 00:30:23 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempTB3284.html [2011-01-31 18:59:49 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempQv4720.html [2011-01-31 18:59:49 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempOU4720.html [2011-01-27 10:19:35 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempgtg340.html [2011-01-27 10:19:35 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempdgI340.html [2011-01-25 20:15:50 | 000,008,330 | -H-- | C] () -- C:\Users\Mateusz\Desktop\folder.jpg [2011-01-23 20:30:46 | 000,000,275 | ---- | C] () -- C:\Users\Mateusz\Documents\Dokuments.rtf [2011-01-17 23:39:59 | 000,045,190 | ---- | C] () -- C:\Users\Mateusz\Documents\j.rtf [2011-01-17 23:39:57 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\j.rtf [2011-01-03 12:05:15 | 000,001,854 | ---- | C] () -- C:\Users\Mateusz\AppData\Roaming\GhostObjGAFix.xml [2011-01-02 22:30:43 | 000,000,000 | ---- | C] () -- C:\Users\Mateusz\AppData\Roaming\wklnhst.dat [2010-12-31 12:46:56 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempaZM264.html [2010-12-31 12:46:56 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempKss264.html [2010-12-31 11:25:15 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempEkA952.html [2010-12-31 11:25:15 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempdaa952.html [2010-12-24 17:44:45 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempNfV752.html [2010-12-24 17:44:45 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempacI752.html [2010-12-20 20:37:51 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Temppsw484.html [2010-12-20 20:37:51 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempaJX484.html [2010-12-16 21:39:38 | 000,000,412 | ---- | C] () -- C:\Windows\ODBC.INI [2010-12-15 19:08:18 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempADQ768.html [2010-12-15 19:08:18 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempfCQ768.html [2010-12-11 11:56:24 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempmZt700.html [2010-12-11 11:56:24 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempTLj700.html [2010-12-06 14:59:03 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempMQX832.html [2010-12-06 14:59:03 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemplqK832.html [2010-12-02 13:18:14 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempOdl372.html [2010-12-02 13:18:14 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempiWD372.html [2010-11-23 17:33:34 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempUQo424.html [2010-11-23 17:33:34 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempBpr424.html [2010-11-20 23:57:24 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempKHf356.html [2010-11-19 23:14:14 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemphpM920.html [2010-11-15 10:41:53 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TemprVw348.html [2010-11-15 10:41:53 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempuAu348.html [2010-11-09 19:50:56 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempuOY552.html [2010-11-09 19:50:56 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempyLH552.html [2010-11-06 11:38:41 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempDvt692.html [2010-11-06 11:38:41 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempJpY692.html [2010-10-24 20:53:23 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempkfh512.html [2010-10-24 20:53:23 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempomz512.html [2010-10-14 23:36:50 | 000,000,337 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Perfmon.PerfmonCfg [2010-10-11 11:40:43 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempIjG744.html [2010-10-11 11:40:43 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempAZY744.html [2010-10-05 10:22:15 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempMwM640.html [2010-10-05 10:22:15 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempUoO640.html [2010-10-03 12:40:30 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempamr252.html [2010-10-03 12:40:30 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempjmr252.html [2010-09-30 05:17:10 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempBmJ252.html [2010-09-30 05:17:10 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempTgy252.html [2010-09-26 13:13:07 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempfcV248.html [2010-09-26 13:13:07 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempiWO248.html [2010-09-23 17:00:45 | 000,001,440 | ---- | C] () -- C:\ProgramData\hpzinstall.log [2010-08-27 20:44:31 | 000,000,021 | ---- | C] () -- C:\Windows\kit.ini [2010-08-27 20:32:25 | 000,000,000 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\QSwitch.txt [2010-08-27 20:32:25 | 000,000,000 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\DSwitch.txt [2010-08-27 20:32:25 | 000,000,000 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\AtStart.txt [2010-08-27 20:32:22 | 000,000,176 | ---- | C] () -- C:\ProgramData\HPWALog.txt [2010-02-11 22:38:09 | 000,000,109 | ---- | C] () -- C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log [2010-02-11 22:35:47 | 000,000,110 | ---- | C] () -- C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log [2010-02-11 22:34:59 | 000,000,105 | ---- | C] () -- C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log [2010-02-11 22:34:37 | 000,000,107 | ---- | C] () -- C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log [2010-02-11 01:36:17 | 000,000,105 | ---- | C] () -- C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log [2010-02-11 01:36:12 | 000,000,032 | ---- | C] () -- C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log [2010-02-11 01:36:00 | 000,000,032 | ---- | C] () -- C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log [2010-02-11 01:35:42 | 000,000,032 | ---- | C] () -- C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log [2010-02-11 01:35:08 | 000,000,032 | ---- | C] () -- C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log [2010-02-11 01:20:39 | 000,000,268 | ---- | C] () -- C:\Windows\SysWow64\RStoneLog2.ini [2010-02-11 01:20:39 | 000,000,209 | ---- | C] () -- C:\Windows\SysWow64\RStoneLog.ini [2009-09-29 15:25:16 | 000,013,312 | ---- | C] () -- C:\Windows\LPRES.DLL [2009-07-14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2003-04-08 11:40:22 | 000,005,679 | ---- | C] () -- C:\Windows\SysWow64\OUTLPERF.INI [color=#E56717]========== LOP Check ==========[/color] [2010-11-30 11:20:32 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\DAEMON Tools Lite [2010-11-02 10:45:18 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Gadu-Gadu 10 [2011-01-31 18:44:18 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\ipla [2010-12-31 21:13:38 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Microgaming [2010-08-29 21:23:09 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\OpenFM [2010-09-11 14:36:13 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Opera [2010-10-24 20:58:13 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\RayV [2011-01-02 22:30:44 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Template [2010-08-29 20:22:54 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Tific [2010-12-29 16:02:23 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\_MDLogs [2011-01-21 11:34:45 | 000,032,604 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] < End of report >

Bardzo proszę o pomoc.

**Posty:** 18165 · przez **wojtas** 14 Lut 2011, 16:18

brakuje z OTL extras.txt..

Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:

:OTL
IE - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://vshare.toolbarhome.com/?hp=df [binary data]]
FF - prefs.js..browser.startup.homepage: "http://www.mydtzone.com/startpage|http://vshare.toolbarhome.com/?hp=df"
FF - prefs.js..extensions.enabledItems: vshare@toolbar:1.0.0
FF - prefs.js..keyword.URL: "http://vshare.toolbarhome.com/search.aspx?srch=ku&q="
O2 - BHO: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll ()
O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - File not found
O3 - HKLM\..\Toolbar: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll ()
O3 - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\..\Toolbar\WebBrowser: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll ()
O4 - Startup: C:\Users\Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\setup_9.0.0.722_14.02.2011_00-12.lnk = C:\Users\Mateusz\Desktop\Virus Removal Tool\setup_9.0.0.722_14.02.2011_00-12\startup.exe ()

:Files
C:\Users\Mateusz\AppData\Local\Temp*.html
C:\Users\Mateusz\AppData\Roaming\mozilla\Firefox\Profiles\742vx3ig.default\extensions\vshare@toolbar
C:\Users\Mateusz\AppData\Roaming\Mozilla\Firefox\Profiles\742vx3ig.default\searchplugins\daemon-search.xml
C:\Users\Mateusz\AppData\Roaming\Mozilla\Firefox\Profiles\742vx3ig.default\searchplugins\web-search.xml

:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]

:Commands
[emptytemp]
[emptyflash]

Kliknij wykonaj skrypt. I potwierdź reset komputera .

Następnie uruchamiasz OTL z opcją skanuj. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia (zawartość notatnika, która otworzy się po restarcie).

**Posty:** 52 · przez **ostry99** 14 Lut 2011, 20:01

raport

Kod: Zaznacz wszystko: All processes killed ========== OTL ========== HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Secondary Start Pages| /E : value set successfully! Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{043C5167-00BB-4324-AF7E-62013FAEDACF}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{043C5167-00BB-4324-AF7E-62013FAEDACF}\ deleted successfully. C:\Program Files (x86)\vShare\vshare_toolbar.dll moved successfully. 64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{043C5167-00BB-4324-AF7E-62013FAEDACF} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{043C5167-00BB-4324-AF7E-62013FAEDACF}\ not found. File C:\Program Files (x86)\vShare\vshare_toolbar.dll not found. Registry value HKEY_USERS\S-1-5-21-1243767424-2648834012-3029125701-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{043C5167-00BB-4324-AF7E-62013FAEDACF} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{043C5167-00BB-4324-AF7E-62013FAEDACF}\ not found. File C:\Program Files (x86)\vShare\vshare_toolbar.dll not found. File move failed. C:\Users\Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\setup_9.0.0.722_14.02.2011_00-12.lnk scheduled to be moved on reboot. File C:\Users\Mateusz\Desktop\Virus Removal Tool\setup_9.0.0.722_14.02.2011_00-12\startup.exe not found. ========== FILES ========== C:\Users\Mateusz\AppData\Local\TempacI752.html moved successfully. C:\Users\Mateusz\AppData\Local\TempADQ768.html moved successfully. C:\Users\Mateusz\AppData\Local\TempAE3348.html moved successfully. C:\Users\Mateusz\AppData\Local\TempaJX484.html moved successfully. C:\Users\Mateusz\AppData\Local\TempaL2124.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempamr252.html moved successfully. C:\Users\Mateusz\AppData\Local\TempAo3056.html moved successfully. C:\Users\Mateusz\AppData\Local\TempAv3120.html moved successfully. C:\Users\Mateusz\AppData\Local\TempAYq264.html moved successfully. C:\Users\Mateusz\AppData\Local\TempAZ3724.html moved successfully. C:\Users\Mateusz\AppData\Local\TempaZM264.html moved successfully. C:\Users\Mateusz\AppData\Local\TempAZY744.html moved successfully. C:\Users\Mateusz\AppData\Local\TempbE2776.html moved successfully. C:\Users\Mateusz\AppData\Local\TempBK3120.html moved successfully. C:\Users\Mateusz\AppData\Local\TempBmJ252.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempbn2744.html moved successfully. C:\Users\Mateusz\AppData\Local\TempBpr424.html moved successfully. C:\Users\Mateusz\AppData\Local\TempBU2928.html moved successfully. C:\Users\Mateusz\AppData\Local\TempcG2720.html moved successfully. C:\Users\Mateusz\AppData\Local\TempcW2264.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempcx3088.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempdaa952.html moved successfully. C:\Users\Mateusz\AppData\Local\TempdgI340.html moved successfully. C:\Users\Mateusz\AppData\Local\TempDJ1248.html moved successfully. C:\Users\Mateusz\AppData\Local\TempdP4620.html moved successfully. C:\Users\Mateusz\AppData\Local\TempDq2700.html moved successfully. C:\Users\Mateusz\AppData\Local\TempDU2884.html moved successfully. C:\Users\Mateusz\AppData\Local\TempDvt692.html moved successfully. C:\Users\Mateusz\AppData\Local\TempDw2884.html moved successfully. C:\Users\Mateusz\AppData\Local\Temped1720.html moved successfully. C:\Users\Mateusz\AppData\Local\TempED3240.html moved successfully. C:\Users\Mateusz\AppData\Local\TempEJ3332.html moved successfully. C:\Users\Mateusz\AppData\Local\TempEkA952.html moved successfully. C:\Users\Mateusz\AppData\Local\TempEu2956.html moved successfully. C:\Users\Mateusz\AppData\Local\TempfCQ768.html moved successfully. C:\Users\Mateusz\AppData\Local\TempfcV248.html moved successfully. C:\Users\Mateusz\AppData\Local\TempFi2032.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempfs3132.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempfw2124.html moved successfully. C:\Users\Mateusz\AppData\Local\TempgO3348.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempgtg340.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempgv4736.html moved successfully. C:\Users\Mateusz\AppData\Local\TempGY2744.html moved successfully. C:\Users\Mateusz\AppData\Local\TempHB2720.html moved successfully. C:\Users\Mateusz\AppData\Local\TemphE2928.html moved successfully. C:\Users\Mateusz\AppData\Local\Temphe3056.html moved successfully. C:\Users\Mateusz\AppData\Local\TempHF2992.html moved successfully. C:\Users\Mateusz\AppData\Local\TemphpM920.html moved successfully. C:\Users\Mateusz\AppData\Local\TemphU2532.html moved successfully. C:\Users\Mateusz\AppData\Local\TempHv2112.html moved successfully. C:\Users\Mateusz\AppData\Local\TempIjG744.html moved successfully. C:\Users\Mateusz\AppData\Local\TempiWD372.html moved successfully. C:\Users\Mateusz\AppData\Local\TempiWO248.html moved successfully. C:\Users\Mateusz\AppData\Local\TempIX3032.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempjmr252.html moved successfully. C:\Users\Mateusz\AppData\Local\TempjO3056.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempjp3128.html moved successfully. C:\Users\Mateusz\AppData\Local\TempJpY692.html moved successfully. C:\Users\Mateusz\AppData\Local\TempJr1804.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempjv3116.html moved successfully. C:\Users\Mateusz\AppData\Local\TempJY3296.html moved successfully. C:\Users\Mateusz\AppData\Local\TempKb3284.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempkfh512.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempkg2172.html moved successfully. C:\Users\Mateusz\AppData\Local\TempKHf356.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempkk5476.html moved successfully. C:\Users\Mateusz\AppData\Local\TempKO3276.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempkp2040.html moved successfully. C:\Users\Mateusz\AppData\Local\TempKss264.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempkt2380.html moved successfully. C:\Users\Mateusz\AppData\Local\TempLg2124.html moved successfully. C:\Users\Mateusz\AppData\Local\TempLH2888.html moved successfully. C:\Users\Mateusz\AppData\Local\TempLJ2172.html moved successfully. C:\Users\Mateusz\AppData\Local\Templj4336.html moved successfully. C:\Users\Mateusz\AppData\Local\TempLm3264.html moved successfully. C:\Users\Mateusz\AppData\Local\Templm5052.html moved successfully. C:\Users\Mateusz\AppData\Local\TemplqK832.html moved successfully. C:\Users\Mateusz\AppData\Local\TemplT3032.html moved successfully. C:\Users\Mateusz\AppData\Local\TempLV3316.html moved successfully. C:\Users\Mateusz\AppData\Local\Templw4336.html moved successfully. C:\Users\Mateusz\AppData\Local\TempmaO264.html moved successfully. C:\Users\Mateusz\AppData\Local\TempMb2992.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempme3320.html moved successfully. C:\Users\Mateusz\AppData\Local\TempMQX832.html moved successfully. C:\Users\Mateusz\AppData\Local\TempMwM640.html moved successfully. C:\Users\Mateusz\AppData\Local\TempmZt700.html moved successfully. C:\Users\Mateusz\AppData\Local\TempNfV752.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempnj2968.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempnj3036.html moved successfully. C:\Users\Mateusz\AppData\Local\TempnW3000.html moved successfully. C:\Users\Mateusz\AppData\Local\TempOa2736.html moved successfully. C:\Users\Mateusz\AppData\Local\TempOc2932.html moved successfully. C:\Users\Mateusz\AppData\Local\TempOc3432.html moved successfully. C:\Users\Mateusz\AppData\Local\TempoD1804.html moved successfully. C:\Users\Mateusz\AppData\Local\TempOdl372.html moved successfully. C:\Users\Mateusz\AppData\Local\TempOe2888.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempomz512.html moved successfully. C:\Users\Mateusz\AppData\Local\TempoR2632.html moved successfully. C:\Users\Mateusz\AppData\Local\TempOU4720.html moved successfully. C:\Users\Mateusz\AppData\Local\TemppC4620.html moved successfully. C:\Users\Mateusz\AppData\Local\Temppsw484.html moved successfully. C:\Users\Mateusz\AppData\Local\TempPy2112.html moved successfully. C:\Users\Mateusz\AppData\Local\TempQe3248.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempqv2928.html moved successfully. C:\Users\Mateusz\AppData\Local\TempQv4720.html moved successfully. C:\Users\Mateusz\AppData\Local\TempQz1824.html moved successfully. C:\Users\Mateusz\AppData\Local\Temprk2888.html moved successfully. C:\Users\Mateusz\AppData\Local\TempRp3116.html moved successfully. C:\Users\Mateusz\AppData\Local\Temprq2884.html moved successfully. C:\Users\Mateusz\AppData\Local\Temprr2776.html moved successfully. C:\Users\Mateusz\AppData\Local\TemprVw348.html moved successfully. C:\Users\Mateusz\AppData\Local\TempSJ3020.html moved successfully. C:\Users\Mateusz\AppData\Local\TempSn2152.html moved successfully. C:\Users\Mateusz\AppData\Local\TempsP2152.html moved successfully. C:\Users\Mateusz\AppData\Local\TempSR2380.html moved successfully. C:\Users\Mateusz\AppData\Local\TempsV3248.html moved successfully. C:\Users\Mateusz\AppData\Local\TempsY1376.html moved successfully. C:\Users\Mateusz\AppData\Local\TempTB3284.html moved successfully. C:\Users\Mateusz\AppData\Local\TemptE3332.html moved successfully. C:\Users\Mateusz\AppData\Local\Temptg2532.html moved successfully. C:\Users\Mateusz\AppData\Local\TempTgy252.html moved successfully. C:\Users\Mateusz\AppData\Local\TempTLj700.html moved successfully. C:\Users\Mateusz\AppData\Local\TempuAu348.html moved successfully. C:\Users\Mateusz\AppData\Local\TempuE2932.html moved successfully. C:\Users\Mateusz\AppData\Local\TempuG3132.html moved successfully. C:\Users\Mateusz\AppData\Local\TempUM2884.html moved successfully. C:\Users\Mateusz\AppData\Local\TempUoO640.html moved successfully. C:\Users\Mateusz\AppData\Local\TempuOY552.html moved successfully. C:\Users\Mateusz\AppData\Local\TempUQo424.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempuz2372.html moved successfully. C:\Users\Mateusz\AppData\Local\TempVG2040.html moved successfully. C:\Users\Mateusz\AppData\Local\TempvI3000.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempvl2124.html moved successfully. C:\Users\Mateusz\AppData\Local\TempVm4736.html moved successfully. C:\Users\Mateusz\AppData\Local\TempVn1248.html moved successfully. C:\Users\Mateusz\AppData\Local\TempWA3296.html moved successfully. C:\Users\Mateusz\AppData\Local\TempwG3112.html moved successfully. C:\Users\Mateusz\AppData\Local\TempWj5052.html moved successfully. C:\Users\Mateusz\AppData\Local\TempWl2032.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempwv3036.html moved successfully. C:\Users\Mateusz\AppData\Local\TempYf3020.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempyg1028.html moved successfully. C:\Users\Mateusz\AppData\Local\TempyLH552.html moved successfully. C:\Users\Mateusz\AppData\Local\TempYv1028.html moved successfully. C:\Users\Mateusz\AppData\Local\TempZc2888.html moved successfully. C:\Users\Mateusz\AppData\Local\TempZD2928.html moved successfully. C:\Users\Mateusz\AppData\Local\Tempzh3240.html moved successfully. C:\Users\Mateusz\AppData\Local\TempZN3208.html moved successfully. C:\Users\Mateusz\AppData\Local\TempZo5476.html moved successfully. C:\Users\Mateusz\AppData\Local\TempzP3316.html moved successfully. C:\Users\Mateusz\AppData\Local\TempZt3112.html moved successfully. C:\Users\Mateusz\AppData\Roaming\mozilla\Firefox\Profiles\742vx3ig.default\extensions\vshare@toolbar\META-INF folder moved successfully. C:\Users\Mateusz\AppData\Roaming\mozilla\Firefox\Profiles\742vx3ig.default\extensions\vshare@toolbar\chrome folder moved successfully. C:\Users\Mateusz\AppData\Roaming\mozilla\Firefox\Profiles\742vx3ig.default\extensions\vshare@toolbar folder moved successfully. C:\Users\Mateusz\AppData\Roaming\Mozilla\Firefox\Profiles\742vx3ig.default\searchplugins\daemon-search.xml moved successfully. C:\Users\Mateusz\AppData\Roaming\Mozilla\Firefox\Profiles\742vx3ig.default\searchplugins\web-search.xml moved successfully. ========== REGISTRY ========== Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\ deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Mateusz ->Temp folder emptied: 14301350 bytes ->Temporary Internet Files folder emptied: 59966845 bytes ->Java cache emptied: 1077173 bytes ->FireFox cache emptied: 56394332 bytes ->Google Chrome cache emptied: 45079461 bytes ->Opera cache emptied: 1226655 bytes ->Flash cache emptied: 36179 bytes User: Public User: TEMP ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: TEMP.Ostrowski ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32768 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 32405577 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 66985 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 201,00 mb [EMPTYFLASH] User: All Users User: Default User: Default User User: Mateusz ->Flash cache emptied: 0 bytes User: Public User: TEMP User: TEMP.Ostrowski Total Flash Files Cleaned = 0,00 mb OTL by OldTimer - Version 3.2.20.6 log created on 02142011_184257 Files\Folders moved on Reboot... File\Folder C:\Users\Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\setup_9.0.0.722_14.02.2011_00-12.lnk not found! C:\Users\Mateusz\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. Registry entries deleted on Reboot...

Kod: Zaznacz wszystko: OTL logfile created on: 2011-02-14 18:54:34 - Run 2 OTL by OldTimer - Version 3.2.20.6 Folder = C:\Users\Mateusz\Desktop 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 72,00% Memory free 8,00 Gb Paging File | 7,00 Gb Available in Paging File | 86,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 452,91 Gb Total Space | 389,99 Gb Free Space | 86,11% Space Free | Partition Type: NTFS Drive D: | 12,55 Gb Total Space | 2,10 Gb Free Space | 16,71% Space Free | Partition Type: NTFS Drive E: | 99,02 Mb Total Space | 92,36 Mb Free Space | 93,27% Space Free | Partition Type: FAT32 Computer Name: OSTROWSKI | User Name: Mateusz | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-02-14 18:41:48 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Mateusz\Desktop\OTL(2).exe PRC - [2010-12-10 12:47:59 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2010-12-10 12:47:59 | 000,016,856 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-02-14 18:41:48 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Mateusz\Desktop\OTL(2).exe MOD - [2010-08-21 06:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2009-11-25 07:17:18 | 000,202,752 | ---- | M] (AMD) [Auto | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2009-11-18 03:14:26 | 000,098,208 | ---- | M] (Andrea Electronics Corporation) [Auto | Stopped] -- C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe -- (AERTFilters) SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2010-10-14 17:27:38 | 000,092,216 | ---- | M] (Hewlett-Packard Company) [Auto | Stopped] -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe -- (HPDrvMntSvc.exe) SRV - [2010-08-28 01:31:12 | 000,581,632 | ---- | M] (THOMSON Telecom Belgium) [Auto | Stopped] -- C:\Program Files (x86)\Thomson\ST330\service\st330service.exe -- (st330service) SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009-10-01 05:01:32 | 002,320,920 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R) SRV - [2009-10-01 05:01:30 | 000,268,824 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R) SRV - [2009-09-20 10:55:20 | 001,037,824 | ---- | M] (Hewlett-Packard Co.) [Auto | Stopped] -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL -- (HPSLPSVC) SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2009-06-06 01:07:28 | 000,250,616 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe -- (GameConsoleService) SRV - [2009-02-22 12:00:00 | 000,129,584 | ---- | M] (EasyBits Sofware AS) [Auto | Stopped] -- C:\Windows\SysWOW64\ezsvc7.dll -- (ezSharedSvc) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2010-11-29 20:41:47 | 000,834,544 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2010-08-28 01:31:12 | 000,054,272 | ---- | M] (THOMSON Telecom Belgium) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stppp.sys -- (stppp) DRV:[b]64bit:[/b] - [2010-08-27 22:42:23 | 000,058,880 | ---- | M] (THOMSON Telecom Belgium) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\steth.sys -- (STETH) DRV:[b]64bit:[/b] - [2010-08-27 22:42:23 | 000,047,616 | ---- | M] (THOMSON Telecom Belgium) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\st330.sys -- (ST330) DRV:[b]64bit:[/b] - [2010-08-27 22:42:23 | 000,024,576 | ---- | M] (THOMSON Telecom Belgium) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stbus.sys -- (STBUS) DRV:[b]64bit:[/b] - [2009-11-25 07:52:16 | 006,174,720 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV:[b]64bit:[/b] - [2009-11-19 03:30:56 | 000,123,408 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService) DRV:[b]64bit:[/b] - [2009-11-03 19:59:04 | 000,299,056 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:[b]64bit:[/b] - [2009-10-24 02:53:00 | 000,291,328 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2009-10-13 11:16:40 | 000,409,624 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2009-10-05 09:34:00 | 001,542,656 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:[b]64bit:[/b] - [2009-09-23 02:39:00 | 000,225,280 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR) DRV:[b]64bit:[/b] - [2009-09-17 21:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R) DRV:[b]64bit:[/b] - [2009-08-09 22:25:45 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone) DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-14 00:31:10 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2009-06-10 22:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92) DRV:[b]64bit:[/b] - [2009-06-10 22:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac) DRV:[b]64bit:[/b] - [2009-06-10 22:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA) DRV:[b]64bit:[/b] - [2009-06-10 22:01:06 | 001,146,880 | ---- | M] (LSI Corp) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem) DRV:[b]64bit:[/b] - [2009-06-10 21:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs) DRV:[b]64bit:[/b] - [2009-06-10 21:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:[b]64bit:[/b] - [2009-06-10 21:35:33 | 000,389,120 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7) DRV:[b]64bit:[/b] - [2009-06-10 21:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64) Intel(R) DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-04-29 08:48:32 | 000,018,432 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HpqKbFiltr.sys -- (HpqKbFiltr) DRV - [2009-09-23 02:39:00 | 000,225,280 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\RtsUStor.sys -- (RSUSBSTOR) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com IE - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/?pc=AVBR IE - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = IE - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.mydtzone.com/startpage IE - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.mydtzone.com/startpage|http://vshare.toolbarhome.com/?hp=df" FF - prefs.js..extensions.enabledItems: smartwebprinting@hp.com:4.51 FF - prefs.js..keyword.URL: "http://vshare.toolbarhome.com/search.aspx?srch=ku&q=" FF - HKLM\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-09-23 18:12:07 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010-12-10 12:48:00 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010-12-16 21:39:08 | 000,000,000 | ---D | M] [2010-09-16 16:08:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\Extensions [2011-02-14 18:52:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\Firefox\Profiles\742vx3ig.default\extensions [2010-09-16 16:21:55 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2010-09-23 18:12:07 | 000,000,000 | ---D | M] (HP Smart Web Printing) -- C:\PROGRAM FILES (X86)\HP\DIGITAL IMAGING\SMART WEB PRINTING\MOZILLAADDON3 [2010-09-14 22:29:36 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2010-09-14 22:29:36 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2010-09-14 22:29:36 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2010-09-14 22:29:36 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2010-09-14 22:29:36 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2010-09-14 22:29:36 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2009-06-10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) O4:[b]64bit:[/b] - HKLM..\Run: [diagnostics] C:\Program Files (x86)\Thomson\ST330\diagnostics\diagnostics.exe (THOMSON Telecom Belgium) O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [RtkOSD] C:\Program Files (x86)\Realtek\Audio\OSD\RtVOsd64.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [diagnostics] C:\Program Files (x86)\Thomson SpeedTouch\ST330\diagnostics\diagnostics.exe (THOMSON Telecom Belgium) O4 - HKLM..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe (EasyBits Software AS) O4 - HKLM..\Run: [SpeedTouch USB Diagnostics] C:\Program Files (x86)\Thomson\SpeedTouch USB\Dragdiag.exe (THOMSON Telecom Belgium) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000..\Run: [Gadu-Gadu 10] C:\Program Files (x86)\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000..\Run: [Odkurzacz-MCD] C:\Program Files (x86)\Odkurzacz\odk_mcd.exe (Franmo Software) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0 O7 - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95 00 00 00 [binary data] O7 - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0 O7 - HKU\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0 O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra Button: Pokaż lub ukryj HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 153.19.208.50 153.19.208.2 O18:[b]64bit:[/b] - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\vsharechrome {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - Reg Error: Key error. File not found O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Handler\vsharechrome {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - File not found O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O28 - HKLM ShellExecuteHooks: {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll (EasyBits Software Corp.) O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] File not found -- C:\Users\Mateusz\Desktop\analiza.rar [2011-02-14 18:42:57 | 000,000,000 | ---D | C] -- C:\_OTL [2011-02-14 18:41:45 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Users\Mateusz\Desktop\OTL(2).exe [2011-02-14 01:33:49 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Users\Mateusz\Desktop\OTL.exe [2011-02-14 01:31:38 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Users\Mateusz\Desktop\OTL.com [2011-02-14 01:17:08 | 000,708,152 | ---- | C] (Duplex Secure Ltd.) -- C:\Users\Mateusz\Desktop\SPTDinst-v176-x64.exe [2011-02-14 01:12:34 | 000,595,000 | ---- | C] (Duplex Secure Ltd.) -- C:\Users\Mateusz\Desktop\SPTDinst-v176-x86.exe [2011-02-13 23:01:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab [2011-02-13 23:00:29 | 091,623,800 | ---- | C] ( ) -- C:\Users\Mateusz\Desktop\setup_9.0.0.722_14.02.2011_00-12.exe [2011-02-13 22:57:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab Setup Files [2011-02-13 22:56:49 | 115,832,504 | ---- | C] (Kaspersky Lab) -- C:\Users\Mateusz\Desktop\kis11.0.2.556en.exe [2011-02-09 07:33:24 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll [2011-02-09 07:33:23 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2011-02-09 07:33:23 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll [2011-02-09 07:33:23 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll [2011-02-09 07:33:23 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2011-02-09 07:33:23 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2011-02-09 07:33:23 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll [2011-02-09 07:33:23 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll [2011-02-09 07:33:23 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe [2011-02-09 07:33:22 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec [2011-02-09 07:33:22 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec [2011-02-09 07:33:22 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe [2011-02-09 07:33:16 | 000,264,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\upnp.dll [2011-02-09 07:33:16 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\upnp.dll [2011-02-09 07:33:15 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\davclnt.dll [2011-02-09 07:33:15 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\davclnt.dll [2011-02-09 07:33:15 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscapi.dll [2011-02-09 07:33:15 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscapi.dll [2011-02-09 07:33:15 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\slwga.dll [2011-02-09 07:33:15 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\slwga.dll [2011-02-09 07:33:13 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll [2011-02-09 07:33:11 | 000,852,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2011-02-09 07:33:11 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2011-02-09 07:33:11 | 000,612,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2011-02-09 07:33:11 | 000,265,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys [2011-02-09 07:33:11 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll [2011-02-09 07:33:10 | 005,510,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2011-02-09 07:33:10 | 001,739,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll [2011-02-09 07:33:09 | 003,957,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2011-02-09 07:33:09 | 003,901,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2011-02-09 07:33:09 | 000,366,080 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2011-02-09 07:33:09 | 000,294,400 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2011-02-09 07:33:09 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll [2011-02-09 07:33:09 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll [2011-01-31 18:21:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Odkurzacz [2011-01-31 18:18:21 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Desktop\studia [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] File not found -- C:\Users\Mateusz\Desktop\analiza.rar [2011-02-14 18:51:55 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl [2011-02-14 18:51:48 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011-02-14 18:51:43 | 3112,587,264 | -HS- | M] () -- C:\hiberfil.sys [2011-02-14 18:50:26 | 000,002,432 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\Tempxj3096.html [2011-02-14 18:50:26 | 000,002,089 | ---- | M] () -- C:\Users\Mateusz\AppData\Local\TempQM3096.html [2011-02-14 18:44:43 | 000,001,046 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011-02-14 18:41:48 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Mateusz\Desktop\OTL(2).exe [2011-02-14 18:23:02 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011-02-14 18:23:02 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011-02-14 18:19:21 | 000,001,050 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011-02-14 01:33:50 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Mateusz\Desktop\OTL.exe [2011-02-14 01:31:41 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Mateusz\Desktop\OTL.com [2011-02-14 01:17:08 | 000,708,152 | ---- | M] (Duplex Secure Ltd.) -- C:\Users\Mateusz\Desktop\SPTDinst-v176-x64.exe [2011-02-14 01:12:35 | 000,595,000 | ---- | M] (Duplex Secure Ltd.) -- C:\Users\Mateusz\Desktop\SPTDinst-v176-x86.exe [2011-02-13 23:00:50 | 091,623,800 | ---- | M] ( ) -- C:\Users\Mateusz\Desktop\setup_9.0.0.722_14.02.2011_00-12.exe [2011-02-13 22:57:31 | 115,832,504 | ---- | M] (Kaspersky Lab) -- C:\Users\Mateusz\Desktop\kis11.0.2.556en.exe [2011-02-13 15:26:04 | 001,549,696 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011-02-13 15:26:04 | 000,697,912 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2011-02-13 15:26:04 | 000,616,008 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011-02-13 15:26:04 | 000,134,990 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2011-02-13 15:26:04 | 000,106,388 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2011-02-12 12:19:41 | 000,002,344 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2011-02-09 10:30:16 | 000,402,784 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2011-02-07 16:18:06 | 000,000,340 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForMateusz.job [2011-01-31 18:21:41 | 000,001,185 | ---- | M] () -- C:\Users\Mateusz\Desktop\Szybkie Czyszczenie Dysku.lnk [2011-01-31 18:21:41 | 000,001,089 | ---- | M] () -- C:\Users\Mateusz\Desktop\Odkurzacz.lnk [2011-01-26 07:53:10 | 000,265,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys [2011-01-26 07:31:20 | 000,144,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll [2011-01-25 20:15:50 | 000,008,330 | -H-- | M] () -- C:\Users\Mateusz\Desktop\folder.jpg [2011-01-23 20:30:46 | 000,000,275 | ---- | M] () -- C:\Users\Mateusz\Documents\Dokuments.rtf [2011-01-17 23:40:00 | 000,045,190 | ---- | M] () -- C:\Users\Mateusz\Documents\j.rtf [2011-01-17 23:39:57 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\j.rtf [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-02-14 18:49:06 | 000,002,432 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Tempxj3096.html [2011-02-14 18:49:06 | 000,002,089 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\TempQM3096.html [2011-02-07 13:12:11 | 000,000,340 | ---- | C] () -- C:\Windows\tasks\HPCeeScheduleForMateusz.job [2011-01-25 20:15:50 | 000,008,330 | -H-- | C] () -- C:\Users\Mateusz\Desktop\folder.jpg [2011-01-23 20:30:46 | 000,000,275 | ---- | C] () -- C:\Users\Mateusz\Documents\Dokuments.rtf [2011-01-17 23:39:59 | 000,045,190 | ---- | C] () -- C:\Users\Mateusz\Documents\j.rtf [2011-01-17 23:39:57 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\j.rtf [2011-01-03 12:05:15 | 000,001,854 | ---- | C] () -- C:\Users\Mateusz\AppData\Roaming\GhostObjGAFix.xml [2011-01-02 22:30:43 | 000,000,000 | ---- | C] () -- C:\Users\Mateusz\AppData\Roaming\wklnhst.dat [2010-12-16 21:39:38 | 000,000,412 | ---- | C] () -- C:\Windows\ODBC.INI [2010-10-14 23:36:50 | 000,000,337 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\Perfmon.PerfmonCfg [2010-09-23 17:00:45 | 000,001,440 | ---- | C] () -- C:\ProgramData\hpzinstall.log [2010-08-27 20:44:31 | 000,000,021 | ---- | C] () -- C:\Windows\kit.ini [2010-08-27 20:32:25 | 000,000,000 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\QSwitch.txt [2010-08-27 20:32:25 | 000,000,000 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\DSwitch.txt [2010-08-27 20:32:25 | 000,000,000 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\AtStart.txt [2010-08-27 20:32:22 | 000,000,176 | ---- | C] () -- C:\ProgramData\HPWALog.txt [2010-02-11 22:38:09 | 000,000,109 | ---- | C] () -- C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log [2010-02-11 22:35:47 | 000,000,110 | ---- | C] () -- C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log [2010-02-11 22:34:59 | 000,000,105 | ---- | C] () -- C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log [2010-02-11 22:34:37 | 000,000,107 | ---- | C] () -- C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log [2010-02-11 01:36:17 | 000,000,105 | ---- | C] () -- C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log [2010-02-11 01:36:12 | 000,000,032 | ---- | C] () -- C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log [2010-02-11 01:36:00 | 000,000,032 | ---- | C] () -- C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log [2010-02-11 01:35:42 | 000,000,032 | ---- | C] () -- C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log [2010-02-11 01:35:08 | 000,000,032 | ---- | C] () -- C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log [2010-02-11 01:20:39 | 000,000,268 | ---- | C] () -- C:\Windows\SysWow64\RStoneLog2.ini [2010-02-11 01:20:39 | 000,000,209 | ---- | C] () -- C:\Windows\SysWow64\RStoneLog.ini [2009-09-29 15:25:16 | 000,013,312 | ---- | C] () -- C:\Windows\LPRES.DLL [2009-07-14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2003-04-08 11:40:22 | 000,005,679 | ---- | C] () -- C:\Windows\SysWow64\OUTLPERF.INI [color=#E56717]========== LOP Check ==========[/color] [2010-11-30 11:20:32 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\DAEMON Tools Lite [2010-11-02 10:45:18 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Gadu-Gadu 10 [2011-01-31 18:44:18 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\ipla [2010-12-31 21:13:38 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Microgaming [2010-08-29 21:23:09 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\OpenFM [2010-09-11 14:36:13 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Opera [2010-10-24 20:58:13 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\RayV [2011-01-02 22:30:44 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Template [2010-08-29 20:22:54 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Tific [2010-12-29 16:02:23 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\_MDLogs [2011-01-21 11:34:45 | 000,032,604 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] < End of report >

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2011-02-14 18:54:34 - Run 2 OTL by OldTimer - Version 3.2.20.6 Folder = C:\Users\Mateusz\Desktop 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 72,00% Memory free 8,00 Gb Paging File | 7,00 Gb Available in Paging File | 86,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 452,91 Gb Total Space | 389,99 Gb Free Space | 86,11% Space Free | Partition Type: NTFS Drive D: | 12,55 Gb Total Space | 2,10 Gb Free Space | 16,71% Space Free | Partition Type: NTFS Drive E: | 99,02 Mb Total Space | 92,36 Mb Free Space | 93,27% Space Free | Partition Type: FAT32 Computer Name: OSTROWSKI | User Name: Mateusz | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) [HKEY_USERS\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Classes\<extension>] .html [@ = ChromeHTML] -- Reg Error: Key error. File not found [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* File not found cmdfile [open] -- "%1" %* File not found comfile [open] -- "%1" %* File not found exefile [open] -- "%1" %* File not found helpfile [open] -- Reg Error: Key error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* File not found regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" File not found scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found scrfile [open] -- "%1" /S File not found txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L" File not found Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L" Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{05EFBF37-0E52-4579-875C-7EEF0DFB4FCB}" = Network64 "{17016DA1-F040-4032-BD36-34DD317BC9D5}" = HP Photosmart All-In-One Driver Software 13.0 Rel. A "{26A24AE4-039D-4CA4-87B4-2F86416017FF}" = Java(TM) 6 Update 17 (64-bit) "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 "{55D55008-E5F6-47D6-B16F-B2A40D4D145F}" = 64 Bit HP CIO Components Installer "{5FBBDC2C-0ED4-A201-7EA3-EE6A848F76D5}" = ccc-utility64 "{68201122-5B1D-70CF-6B4B-AB7732A782A5}" = ATI Catalyst Install Manager "{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007 "{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007 "{90120000-002A-0415-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Polish) 2007 "{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 "{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "HP Imaging Device Functions" = HP Imaging Device Functions 13.0 "HP Photosmart Essential" = HP Photosmart Essential 3.5 "HP Smart Web Printing" = HP Smart Web Printing 4.51 "HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0 "HPExtendedCapabilities" = HP Customer cenzura! Program 13.0 "HPOCR" = OCR Software by I.R.I.S. 13.0 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Shop for HP Supplies" = Shop for HP Supplies "SpeedTouch 330" = SpeedTouch 330 "SynTPDeinstKey" = Synaptics Pointing Device Driver "WinRAR archiver" = Archiwizator WinRAR [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam "{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements "{0893F6E8-D9F5-6225-6C08-F05E509BB84A}" = CCC Help French "{08DB3902-2CE0-474D-BCE3-0177766CE9F1}" = HP Support Assistant "{0EF5BEA9-B9D3-46d7-8958-FB69A0BAEACC}" = Status "{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan "{109F3C58-CC58-777F-B937-3347F0A6A5E5}" = CCC Help Danish "{10CCF16B-F1C9-4B24-9570-B4CCEE42392D}" = LightScribe System Software "{114B6A6A-3B55-7796-3250-AA3FC23743A9}" = CCC Help Czech "{11D0053C-4160-6257-91F6-0EDBAD10B66B}" = CCC Help Spanish "{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch "{17B4760F-334B-475D-829F-1A3E94A6A4E6}" = HP Setup "{1AE3E621-E0C0-4aa1-B10B-B3E353A8D110}" = c3100_Help "{1EC71BFB-01A3-4239-B6AF-B1AE656B15C0}" = TrayApp "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Narzędzie do przekazywania usługi Windows Live "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT "{24D188C8-4071-5F61-42AF-F45115DEC4AA}" = CCC Help Thai "{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}" = Skype™ 4.0 "{254C37AA-6B72-4300-84F6-98A82419187E}" = ActiveCheck component for HP Active Support Library "{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java(TM) 6 Update 17 "{2A7EF808-14F3-4E93-BE3A-1675EE5332A4}" = AIO_CDA_ProductContext "{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}" = CyberLink PowerDVD 8 "{2E522ED6-01E2-4207-82D5-B3BFB31B8BD4}" = Windows Live Sync "{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm "{2FF8C687-DB7D-4adc-A5DC-57983EC25046}" = DeviceDiscovery "{306B39C9-3AB1-4161-8567-9C7E50B41AE3}" = Microsoft Works "{32D95703-A0EC-C75C-1D49-542887F73B89}" = Catalyst Control Center Localization All "{34D2AB40-150D-475D-AE32-BD23FB5EE355}" = HP Quick Launch Buttons "{354038F6-0A35-4C55-A80B-F86C4C1A6D38}" = C3100 "{3718C4EC-BF5C-79FF-87FF-C08E8D21E052}" = CCC Help Chinese Standard "{3877C901-7B90-4727-A639-B6ED2DD59D43}" = ESU for Microsoft Windows 7 "{3A057951-7CF8-BB44-C823-3E6E8AF6BFB7}" = CCC Help Chinese Traditional "{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform "{3BD8D466-E5ED-AE3D-A089-BBDDA1EA2AB5}" = CCC Help Greek "{3C92B2E6-380D-4fef-B4DF-4A3B4B669771}" = Copy "{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go "{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}" = HP Advisor "{43BA31BA-04BD-2EA3-0A60-A9C54E06D3F2}" = muvee Reveal "{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg "{440B915A-0C85-45DB-92AE-75AE14704A64}" = Fax "{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}" = Recovery Manager "{49404BCA-BC5F-519A-9822-07F4C0711C75}" = Catalyst Control Center Graphics Previews Vista "{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter "{4C6C8AA5-24BD-6AEA-1091-7056CEC7E7C0}" = Catalyst Control Center Graphics Light "{4D3D893B-51CF-E89A-D536-0A658AE46140}" = CCC Help Swedish "{4D5927FF-F3A0-4E03-9DE9-8265499164CF}" = HP User Guides "{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}" = UnloadSupport "{51119170-3D3F-B137-E735-AE9D315B5CF4}" = Catalyst Control Center Graphics Full Existing "{51958BA7-21E4-4A8B-9098-CD8375BD17B2}" = Asystent rejestracji usługi Windows Live "{54CC7901-804D-4155-B353-21F0CC9112AB}" = HP Wireless Assistant "{6053FE9B-5473-41D6-AEBF-AD6F98138191}" = Windows Live Movie Maker "{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2 "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components "{669D4A35-146B-4314-89F1-1AC3D7B88367}" = HPAsset component for HP Active Support Library "{681B698F-C997-42C3-B184-B489C6CA24C9}" = HPPhotoSmartDiscLabelContent1 "{68A0F54D-DB64-0ED9-C563-CE85C26CEE15}" = Catalyst Control Center Graphics Full New "{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply "{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox "{75053DEE-4BE5-3C4B-3FFC-3DA37ADE0347}" = CCC Help Hungarian "{77973724-A5B7-4A2A-CAB5-D6EEE02C06FC}" = CCC Help Korean "{7A852BDE-016A-CDAC-1401-E99317CB956C}" = CCC Help Italian "{80E158EA-7181-40FE-A701-301CE6BE64AB}" = CyberLink MediaShow "{8132E9B3-7B40-8577-9CFE-8CB2DD0F21B3}" = ccc-core-static "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{84CE8562-9563-DEDA-FA31-F3BCF58B670B}" = CCC Help Polish "{85E15059-42E9-4EAF-3CE9-17374870BA85}" = CCC Help German "{87CC8013-56D1-43E1-A0A5-AD406B4EBA95}" = Opera 10.63 "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows Vista and Later "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86) "{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007 "{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007 "{90120000-0016-0415-0000-0000000FF1CE}_HOMESTUDENTR_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007 "{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007 "{90120000-0018-0415-0000-0000000FF1CE}_HOMESTUDENTR_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007 "{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007 "{90120000-001B-0415-0000-0000000FF1CE}_HOMESTUDENTR_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007 "{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007 "{90120000-001F-0415-0000-0000000FF1CE}_HOMESTUDENTR_{E9EA2604-8AC9-47D2-8F4B-6BF60787A357}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007 "{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-0020-0415-0000-0000000FF1CE}" = Pakiet zgodności dla systemu Office 2007 "{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-002A-0409-1000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-002A-0415-1000-0000000FF1CE}_HOMESTUDENTR_{D45F91DE-F0FC-4D5F-9A0C-FDE5B251AAC6}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007 "{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007 "{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007 "{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007 "{90120000-006E-0415-0000-0000000FF1CE}_HOMESTUDENTR_{D45F91DE-F0FC-4D5F-9A0C-FDE5B251AAC6}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007 "{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007 "{90120000-00A1-0415-0000-0000000FF1CE}_HOMESTUDENTR_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007 "{90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0116-0409-1000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007 "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581) "{935BEAF7-6AAC-18BA-A8FF-8198602502DA}" = CCC Help Portuguese "{95120000-00AF-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (Polish) "{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader "{9862473C-E063-4C68-A161-2CDE0E8048A5}" = Podstawowe programy Windows Live "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9AA66F70-CCBB-8E9E-0D8D-59E23EF770A4}" = Catalyst Control Center Core Implementation "{9AB614A6-719C-4A6E-A63E-831E0A35F62A}" = Windows Live Writer "{9B362566-EC1B-4700-BB9C-EC661BDE2175}" = DocProc "{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}" = Microsoft Search Enhancement Pack "{9CDEAEC9-2F14-4D39-8541-C1EEC4B5D1CB}" = Galeria fotografii usługi Windows Live "{A7388312-4FBB-48E5-8DC0-B63DA02658AE}" = Windows Live Toolbar "{A7AEE29F-839E-46B5-B347-6D430618129F}" = AIO_CDA_Software "{A8F4F0BB-0A1C-3A5A-97B8-F7150725C173}" = CCC Help Turkish "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AC76BA86-7AD7-1033-7B44-A93000000001}" = Adobe Reader 9.3 "{AE6FD3D5-6302-815B-B27D-61A2D296BD94}" = CCC Help Finnish "{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86) "{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations "{C35FE07E-24B5-410F-85B7-122087A0C7DD}" = Poczta usługi Windows Live "{C3A32068-8AB1-4327-BB16-BED9C6219DC7}" = Atheros Driver Installation Program "{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant "{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint "{C93CFC00-267B-3564-273A-E2061DCF0DD1}" = CCC Help Norwegian "{CAE4213F-F797-439D-BD9E-79B71D115BE3}" = HPPhotoGadget "{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector "{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86 "{D1803CD4-0CE7-4484-98E3-88D7A2D629A4}" = Windows Live Messenger "{D41FAAA9-8048-4906-86B2-9AADEA1FA0B7}" = SpeedTouch USB Software "{D46D081B-F60E-467E-A7C4-117B70D76731}" = HP Update "{D668BFA1-12CA-0692-D3BA-15CED8E126D2}" = CCC Help English "{D79113E7-274C-470B-BD46-01B10219DF6A}" = HPPhotosmartEssential "{D86B0E2E-DF9A-441C-AF77-8D1A0FF00FA6}" = AIO_Scan "{D8DFA46A-39F7-4368-810D-18AFCFDDAEAF}" = Adobe Shockwave Player "{DC635845-46D3-404B-BCB1-FC4A91091AFA}" = SmartWebPrinting "{E0897770-46C9-4322-AD44-8BFA6BE217B2}" = Catalyst Control Center - Branding "{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update "{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant "{E5D5AC01-2095-566B-D92F-759DA0CB382B}" = Catalyst Control Center Graphics Previews Common "{E8CF5CE7-02DC-042B-70B8-4A47F394663A}" = Catalyst Control Center InstallProxy "{EF15B806-FF50-B61F-490D-29373E8C0623}" = CCC Help Japanese "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F1D7AC58-554A-4A58-B784-B61558B1449A}" = QLBCASL "{FAEE8E0C-4D05-7079-2E05-23BB831BBA73}" = CCC Help Dutch "{FDAB5C9C-76E1-E1D9-9CD6-9DAEFF8B9ECB}" = CCC Help Russian "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player "AvantBrowser" = Avant Browser (remove only) "EasyBits Magic Desktop" = Magic Desktop "Gadu-Gadu 10" = Gadu-Gadu 10 "Google Chrome" = Google Chrome "HOMESTUDENTR" = Microsoft Office Home and Student 2007 "InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam "InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite "InstallShield_{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}" = CyberLink PowerDVD 8 "InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go "InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}" = CyberLink MediaShow "InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint "InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "MiKTeX 2.8" = MiKTeX 2.8 "Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13) "NapiProjekt_is1" = NapiProjekt 1.0.6.9 "Odkurzacz 12.5_is1" = Odkurzacz 12.5 "SpeedTouch 330" = SpeedTouch 330 "TeXnicCenter_is1" = TeXnicCenter Version 1.0 Stable RC1 "The KMPlayer" = The KMPlayer (remove only) "vShare" = vShare Plugin "WildTangent hp Master Uninstall" = HP Games "Winamp" = Winamp "WinLiveSuite_Wave3" = Podstawowe programy Windows Live [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-1243767424-2648834012-3029125701-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "BankBrowser" = BankBrowser "Counter-Strike 1.6: New Era" = Counter-Strike 1.6: New Era "Winamp Detect" = Detektor Winampa [color=#E56717]========== Last 10 Event Log Errors ==========[/color] Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt! < End of report >

Jak coś to te usunięcie chyba nie przyniosło jeszcze oczekiwanego rezultatu bo poprawy w pracy komputera nie widac, wszystkie operacje wykonywałem w trybie awaryjnym.
Przez pomyłkę wkleiłem dwa razy wcześniej log z OTL zamiast OTL-a i Extras, sorry.

**Posty:** 18165 · przez **wojtas** 14 Lut 2011, 20:13

nic więcej nie widać...

*Uruchom OTL z opcji sprzątanie.
* wykonaj optymalizację Windowsa ( instrukcja dla Windowsa XP, lecz w innych systemach jest podobnie )
* zrób pełny skan Malwarebytes Anti-Malware (zaktualizuj, usuń co znajdzie )
* Skasuj stan przywracania systemu

Zaktualizuj zabezpieczenia:
>>> Adobe Reader (bez Free McAfee® Security Scan Plus)
>>> Java™ 6 Update 23

**Posty:** 52 · przez **ostry99** 15 Lut 2011, 22:10

Zrobiłem wszystko jak trzeba oprócz usunięcia przywracania systemu (wyskakiwał jakiś błąd). Laptop działa nawet szybciej, ale problem się powtarza. Włączam komputer, śmiga pięknie przez powiedzmy 15-30 minut i później w pewnym momencie wszystko zaczyna się mulic. Nie wiem czemu tak jest. Byc może jest zakurzony w środku i procesor nie chodzi tak jak powinien? W każdym razie jak wyłączę kompa po tym jak dopadnie go to "zamulanie" i kiedy po pewnym czasie się "ostudzi" to włączam i działa normalnie. Później chwila siedzenia na necie i bum, znowu zaczyna wolniej pracowac.

Jeśli to by był jakiś techniczny problem to mógłbym oddac na gwarancję, bo czyszczenia sam się nie chcę podejmowac. No ale nie wiem, może to jakiś wirus?

**Posty:** 12734 · przez **Mikou@j** 15 Lut 2011, 22:17

Mógłbyś oddać na gwarancję. Nie ma co się bawić samemu, skoro jest taka możliwość. Jeżeli się tak dzieje za każdym razem jak komp zaczyna intensywniej pracować, to nawet byłoby to wskazane. Ten fakt jest ważny bo na pewno w miejscu, w którym go kupowałeś będą to sprawdzać.

**Posty:** 52 · przez **ostry99** 15 Lut 2011, 22:22

Też tak myślę, że to będzie najlepsze rozwiązanie. Bo np. reset nic nie pomaga, dalej zamula, a śmiga dobrze tylko wtedy, gdy włączam go po jakimś okresie bez użycia, kiedy jest "zimny".

No i oczywiście w trybie awaryjnym działa zawsze sprawnie, niezależnie jak długo pracuje.

**Posty:** 12734 · przez **Mikou@j** 15 Lut 2011, 22:32

ostry99 napisał(a):No i oczywiście w trybie awaryjnym działa zawsze sprawnie, niezależnie jak długo pracuje.

Tak, tylko tryb awaryjny nie jest przeznaczony do normalnej pracy, a ładowane są tam tylko podstawowe funkcje i sterowniki, dlatego na niego nawet nie ma co patrzeć.

Także zanieś na gwarancję bez stresu

Kto jest na forum